[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.57' (ECDSA) to the list of known hosts. 2020/06/18 04:14:41 fuzzer started 2020/06/18 04:14:42 dialing manager at 10.128.0.105:41225 2020/06/18 04:14:42 syscalls: 3089 2020/06/18 04:14:42 code coverage: enabled 2020/06/18 04:14:42 comparison tracing: enabled 2020/06/18 04:14:42 extra coverage: enabled 2020/06/18 04:14:42 setuid sandbox: enabled 2020/06/18 04:14:42 namespace sandbox: enabled 2020/06/18 04:14:42 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/18 04:14:42 fault injection: enabled 2020/06/18 04:14:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/18 04:14:42 net packet injection: enabled 2020/06/18 04:14:42 net device setup: enabled 2020/06/18 04:14:42 concurrency sanitizer: enabled 2020/06/18 04:14:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/18 04:14:42 USB emulation: enabled syzkaller login: [ 53.755669][ T8917] KCSAN: could not find function: '_find_next_bit' 2020/06/18 04:14:46 suppressing KCSAN reports in functions: 'ep_poll' 'blk_mq_get_request' 'blk_mq_dispatch_rq_list' '__mark_inode_dirty' 'shmem_file_read_iter' 'echo_char' '__ext4_new_inode' 'run_timer_softirq' 'blk_mq_sched_dispatch_requests' 'n_tty_receive_buf_common' 'mod_timer' 'xas_find_marked' 'futex_wait_queue_me' 'page_counter_charge' 'tick_sched_do_timer' '__delete_from_page_cache' 'io_sq_thread' 'ext4_free_inodes_count' 'do_signal_stop' '_find_next_bit' 'fat12_ent_put' 'generic_fillattr' 'shmem_getpage_gfp' 'generic_write_end' 'tick_nohz_idle_stop_tick' 'copy_process' 'ext4_da_write_end' 'kauditd_thread' 'ktime_get_real_seconds' 'vti_tunnel_xmit' 'generic_file_read_iter' 'pcpu_alloc' 'tick_nohz_next_event' 'pipe_double_lock' 'alloc_pid' 'do_nanosleep' 'find_get_pages_range_tag' 'ext4_mark_iloc_dirty' 'do_syslog' 'xas_clear_mark' 04:17:48 executing program 0: fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5) [ 237.919121][ T8923] IPVS: ftp: loaded support on port[0] = 21 [ 237.994086][ T8923] chnl_net:caif_netlink_parms(): no params data found 04:17:49 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002007, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0xa2ffff}], 0xc6, 0x0) [ 238.043773][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.051996][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.060552][ T8923] device bridge_slave_0 entered promiscuous mode [ 238.069724][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.077392][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.085096][ T8923] device bridge_slave_1 entered promiscuous mode [ 238.117103][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.138837][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.187604][ T8923] team0: Port device team_slave_0 added [ 238.196665][ T8923] team0: Port device team_slave_1 added [ 238.236405][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.243428][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.286764][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.302215][ T9069] IPVS: ftp: loaded support on port[0] = 21 [ 238.310509][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 04:17:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 238.321232][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.348520][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.428114][ T8923] device hsr_slave_0 entered promiscuous mode [ 238.444175][ T8923] device hsr_slave_1 entered promiscuous mode [ 238.542767][ T9107] IPVS: ftp: loaded support on port[0] = 21 [ 238.618336][ T9069] chnl_net:caif_netlink_parms(): no params data found 04:17:49 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@size={'size', 0x3d, [0x78]}}]}) [ 238.738841][ T9107] chnl_net:caif_netlink_parms(): no params data found [ 238.754124][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.762806][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.771756][ T9069] device bridge_slave_0 entered promiscuous mode [ 238.779324][ T8923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.825413][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.834316][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.843684][ T9069] device bridge_slave_1 entered promiscuous mode [ 238.859445][ T8923] netdevsim netdevsim0 netdevsim1: renamed from eth1 04:17:50 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect(r0, 0x0, 0x0) [ 238.961805][ T8923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.015621][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.034318][ T8923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.037578][ T9370] IPVS: ftp: loaded support on port[0] = 21 [ 239.103654][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.138170][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.145246][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.153841][ T9107] device bridge_slave_0 entered promiscuous mode [ 239.169473][ T9399] IPVS: ftp: loaded support on port[0] = 21 [ 239.176050][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.196391][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.203958][ T9107] device bridge_slave_1 entered promiscuous mode [ 239.271107][ T9069] team0: Port device team_slave_0 added [ 239.301650][ T9069] team0: Port device team_slave_1 added [ 239.315386][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 04:17:50 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 239.358810][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.379681][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.387056][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.414626][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.452096][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.459254][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.486464][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.528766][ T9370] chnl_net:caif_netlink_parms(): no params data found [ 239.540528][ T9107] team0: Port device team_slave_0 added [ 239.565483][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 239.572548][ T9555] IPVS: ftp: loaded support on port[0] = 21 [ 239.598711][ T9069] device hsr_slave_0 entered promiscuous mode [ 239.656544][ T9069] device hsr_slave_1 entered promiscuous mode [ 239.706249][ T9069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.713961][ T9069] Cannot create hsr debugfs directory [ 239.721220][ T9107] team0: Port device team_slave_1 added [ 239.775332][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.782585][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.809020][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.821550][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.828548][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.854898][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.938187][ T9107] device hsr_slave_0 entered promiscuous mode [ 239.986675][ T9107] device hsr_slave_1 entered promiscuous mode [ 240.036254][ T9107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.043840][ T9107] Cannot create hsr debugfs directory [ 240.064337][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.071898][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.079073][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.086779][ T9370] device bridge_slave_0 entered promiscuous mode [ 240.120385][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.128206][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.135865][ T9370] device bridge_slave_1 entered promiscuous mode [ 240.171471][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.178757][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.186684][ T9399] device bridge_slave_0 entered promiscuous mode [ 240.197386][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.204442][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.213357][ T9399] device bridge_slave_1 entered promiscuous mode [ 240.232662][ T9370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.255547][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.273198][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.283776][ T9370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.293713][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.301545][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.319142][ T9069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.368682][ T9069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.409526][ T9069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.469790][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.483996][ T9555] chnl_net:caif_netlink_parms(): no params data found [ 240.503170][ T9069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.578770][ T9370] team0: Port device team_slave_0 added [ 240.587244][ T9370] team0: Port device team_slave_1 added [ 240.609003][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.619480][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.628149][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.635171][ T4143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.668867][ T9399] team0: Port device team_slave_0 added [ 240.693448][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.700906][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.709618][ T9555] device bridge_slave_0 entered promiscuous mode [ 240.720447][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.728332][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.738541][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.746893][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.753997][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.764285][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.773382][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.782273][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.790723][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.800073][ T9399] team0: Port device team_slave_1 added [ 240.807202][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.814170][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.840446][ T9370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.855719][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.862814][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.891703][ T9370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.903019][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.910780][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.918910][ T9555] device bridge_slave_1 entered promiscuous mode [ 240.930991][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.951818][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.962073][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.978374][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.985397][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.011938][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.037668][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.044750][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.071946][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.099774][ T9107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.165284][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.218513][ T9399] device hsr_slave_0 entered promiscuous mode [ 241.256563][ T9399] device hsr_slave_1 entered promiscuous mode [ 241.296441][ T9399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.304022][ T9399] Cannot create hsr debugfs directory [ 241.312713][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.321491][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.330018][ T9107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.408853][ T9370] device hsr_slave_0 entered promiscuous mode [ 241.446469][ T9370] device hsr_slave_1 entered promiscuous mode [ 241.506129][ T9370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.513726][ T9370] Cannot create hsr debugfs directory [ 241.528259][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.549517][ T9555] team0: Port device team_slave_0 added [ 241.558335][ T9107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.589986][ T9107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.657256][ T9555] team0: Port device team_slave_1 added [ 241.673018][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.680833][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.707545][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.719521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.729195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.740572][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.761482][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.768562][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.794924][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.888240][ T9555] device hsr_slave_0 entered promiscuous mode [ 241.926528][ T9555] device hsr_slave_1 entered promiscuous mode [ 241.976176][ T9555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.983741][ T9555] Cannot create hsr debugfs directory [ 242.021713][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.029221][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.060668][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.089348][ T9399] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.149595][ T9399] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.211044][ T9399] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.288009][ T9399] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.353027][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.364302][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.373290][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.409399][ T9555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.478619][ T9370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.525232][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.532985][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.541027][ T9555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.571120][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.580134][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.595370][ T9370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.638673][ T9370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.689385][ T9370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.747923][ T9555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.811907][ T8923] device veth0_vlan entered promiscuous mode [ 242.819757][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.828228][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.835847][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.844798][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.853472][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.860519][ T9369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.869054][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.877828][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.886104][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.893117][ T9369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.901019][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.909779][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.918132][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.930025][ T9555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.978787][ T9107] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.000373][ T8923] device veth1_vlan entered promiscuous mode [ 243.008821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.016780][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.024696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.032606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.041571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.050529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.059066][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.066219][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.074017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.083142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.091830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.100432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.109113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.134800][ T9069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.147113][ T9069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.167325][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.175874][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.184405][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.194244][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.203174][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.214450][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.223039][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.230097][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.240709][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.249190][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.259944][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.268764][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.279458][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.287769][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.299464][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.316099][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.324803][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.334358][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.343201][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.384245][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.391505][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.402584][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.411176][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.421724][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.429693][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.460928][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.469722][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.480493][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.490405][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.501314][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.508397][ T9782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.516511][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.523893][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.531984][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.543902][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.559413][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.584951][ T9370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.595409][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.603993][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.614615][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.621692][ T9782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.631969][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.646539][ T8923] device veth0_macvtap entered promiscuous mode [ 243.657449][ T8923] device veth1_macvtap entered promiscuous mode [ 243.688548][ T9370] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.695689][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.705200][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.713999][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.722182][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.731327][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.739009][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.746647][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.754936][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.763631][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.772036][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.790717][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.815381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.823965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.833149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.842256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.851085][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.859889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.868707][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.875715][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.884055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.893125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.901914][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.908970][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.923041][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.945672][ T9399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.958329][ T9399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.978045][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.985069][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.993273][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.003917][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.012771][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.024023][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.033158][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.044624][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.053365][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.062200][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.070659][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.079081][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.086678][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.102794][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.125485][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.134504][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.143220][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.153032][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.164832][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.176160][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.184539][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.201858][ T9555] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.239159][ T9069] device veth0_vlan entered promiscuous mode [ 244.246337][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.254041][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.262449][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.270363][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.278298][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.286523][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.294338][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.303198][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.323210][ T9370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.334096][ T9370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.351586][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.360384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.369777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.378821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.443295][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.455802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.463994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.472892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.481590][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.488665][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.496790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.505406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.514277][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.521407][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.529459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.590961][ T9069] device veth1_vlan entered promiscuous mode [ 244.611908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.626562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.646447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.655165][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.672908][ T9370] 8021q: adding VLAN 0 to HW filter on device batadv0 04:17:55 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x73) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) [ 244.708597][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.719587][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.748954][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.761988][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.777288][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 04:17:55 executing program 0: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x50) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) [ 244.796920][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.816677][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.835172][ T9555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.866197][ T9555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.877312][ C1] hrtimer: interrupt took 26509 ns [ 244.899267][ T9107] device veth0_vlan entered promiscuous mode 04:17:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000020008104e00f80ecdb4cb902020000040000000bda0040fb12001700feffffff40d819a906000500000f", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 244.921346][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.933764][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.956545][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.965096][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.973985][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.982441][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.993146][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.001441][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.011944][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.037584][ T9069] device veth0_macvtap entered promiscuous mode [ 245.060045][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.068848][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.078776][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.087995][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.097095][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.105558][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.115355][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.129019][ T9107] device veth1_vlan entered promiscuous mode [ 245.139469][ T9069] device veth1_macvtap entered promiscuous mode [ 245.168970][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.178143][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 04:17:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 245.190895][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.198545][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.208218][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.216572][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.248999][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.260004][ T9399] device veth0_vlan entered promiscuous mode 04:17:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4002}, {}, {}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) [ 245.298680][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.314293][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.334737][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.352670][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.376431][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.391545][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.405517][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.419873][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.431868][ T9370] device veth0_vlan entered promiscuous mode [ 245.444848][ T9399] device veth1_vlan entered promiscuous mode [ 245.453191][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.466304][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.478077][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.493537][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.502514][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.511808][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.521120][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.532777][ T9107] device veth0_macvtap entered promiscuous mode [ 245.542735][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.554092][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.568195][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.582751][ T9370] device veth1_vlan entered promiscuous mode [ 245.603519][ T9107] device veth1_macvtap entered promiscuous mode [ 245.616363][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.625465][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.634255][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:17:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4002}, {}, {}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) [ 245.850543][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.884892][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.898495][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.909252][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.936372][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.952187][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.962865][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.984187][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.008991][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.037384][ T9399] device veth0_macvtap entered promiscuous mode 04:17:57 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002007, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0xa2ffff}], 0xc6, 0x0) [ 246.072157][ T9555] device veth0_vlan entered promiscuous mode [ 246.084800][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.106395][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.115415][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.148830][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.166515][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.180524][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.197415][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.218417][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.237585][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.259649][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.270799][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.282351][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.299276][ T9399] device veth1_macvtap entered promiscuous mode [ 246.307618][ T9370] device veth0_macvtap entered promiscuous mode [ 246.325583][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.333973][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.346102][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 04:17:57 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1ec) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') preadv(r2, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x900) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@getqdisc={0x28, 0x26, 0x301, 0x0, 0x0, {}, [{0x4}]}, 0x28}}, 0x0) [ 246.353991][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.365513][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.386532][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.423085][ T9555] device veth1_vlan entered promiscuous mode [ 246.429050][ C0] sd 0:0:1:0: [sg0] tag#6846 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 246.439558][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB: Test Unit Ready [ 246.439866][ T9370] device veth1_macvtap entered promiscuous mode [ 246.446039][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.461937][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.471564][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.481302][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.482809][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.490940][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.510911][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.517826][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.520528][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.539923][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.542730][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.549504][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.549530][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.579095][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.579119][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.598229][ C0] sd 0:0:1:0: [sg0] tag#6846 CDB[c0]: 00 00 00 00 00 00 00 00 [ 246.599701][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.633516][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.645930][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.657450][ T9370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.678193][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.690742][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.702809][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.716373][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.746269][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.756754][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.766953][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.777590][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.788668][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.801669][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.812992][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.821981][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.832229][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.841844][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.852900][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.861616][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.873858][ C1] sd 0:0:1:0: [sg0] tag#6847 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 246.884269][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB: Test Unit Ready [ 246.886951][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.890762][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.902432][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.910745][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.920949][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.930283][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.940995][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.950302][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.963659][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.969862][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.983171][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.989887][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.003896][ T9370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.011037][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.011058][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.011079][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.011099][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.011123][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.011148][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.011168][ C1] sd 0:0:1:0: [sg0] tag#6847 CDB[c0]: 00 00 00 00 00 00 00 00 [ 247.160915][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.174580][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.186051][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.197182][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.207886][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.218998][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.229217][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.239984][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.251234][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.260142][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.268902][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.277652][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.286492][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.388910][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.399385][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.414613][ T9555] device veth0_macvtap entered promiscuous mode 04:17:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 247.550447][ T9555] device veth1_macvtap entered promiscuous mode [ 247.690952][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.713666][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.744191][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.759413][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.769545][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.780248][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.782633][T10264] tmpfs: Bad value for 'size' [ 247.790315][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.805334][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.815496][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.826015][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.845205][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.859382][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.868008][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.877011][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.885629][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.902003][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.922034][T10264] tmpfs: Bad value for 'size' 04:17:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 04:17:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000001c0)="30800200", 0x4, r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) [ 247.945804][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.975878][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.993560][T10274] PKCS8: Unsupported PKCS#8 version [ 247.995756][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.003714][T10276] PKCS8: Unsupported PKCS#8 version [ 248.025749][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.045929][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.065725][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.077139][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.087266][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.098128][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.109294][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.117082][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.126624][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.409042][T10285] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 248.418898][T10285] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 248.429436][T10285] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 248.440652][T10285] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 04:17:59 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:17:59 executing program 2: syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@meta='meta'}]}) 04:17:59 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1ec) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') preadv(r2, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x900) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@getqdisc={0x28, 0x26, 0x301, 0x0, 0x0, {}, [{0x4}]}, 0x28}}, 0x0) 04:17:59 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect(r0, 0x0, 0x0) 04:17:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:17:59 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="500082ae", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf250d0000003c00038008000100f6000000080001000700000008000300030000000800030000010000080003000700000008000200070000000800010007000000"], 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) 04:17:59 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect(r0, 0x0, 0x0) [ 248.617141][ C0] sd 0:0:1:0: [sg0] tag#6784 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 248.627577][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB: Test Unit Ready [ 248.634025][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.643628][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.653219][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.662892][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.672689][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.674093][T10303] gfs2: not a GFS2 filesystem [ 248.682270][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.682298][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.706357][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.715953][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.725795][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.735348][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.744951][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 248.754596][ C0] sd 0:0:1:0: [sg0] tag#6784 CDB[c0]: 00 00 00 00 00 00 00 00 04:17:59 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect(r0, 0x0, 0x0) 04:17:59 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hfsplus\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 248.806789][T10304] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 248.825001][T10304] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 248.920783][T10303] gfs2: not a GFS2 filesystem [ 248.924605][T10316] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 248.940481][T10304] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 248.952725][T10304] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 248.954782][T10316] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 04:18:00 executing program 4: connect(0xffffffffffffffff, 0x0, 0x0) 04:18:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa030595eecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7509bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 248.984343][T10334] hfsplus: unable to find HFS+ superblock [ 248.994280][T10337] hfsplus: unable to find HFS+ superblock [ 249.015404][T10316] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 04:18:00 executing program 1: [ 249.034483][T10316] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 04:18:00 executing program 5: 04:18:00 executing program 4: connect(0xffffffffffffffff, 0x0, 0x0) 04:18:00 executing program 1: 04:18:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:00 executing program 2: [ 249.314719][T10354] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 249.336979][T10354] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:00 executing program 2: 04:18:00 executing program 1: 04:18:00 executing program 4: connect(0xffffffffffffffff, 0x0, 0x0) 04:18:00 executing program 3: 04:18:00 executing program 5: 04:18:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:00 executing program 2: 04:18:00 executing program 5: 04:18:00 executing program 1: 04:18:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect(r0, 0x0, 0x0) 04:18:00 executing program 2: 04:18:00 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) 04:18:00 executing program 2: [ 249.614453][T10368] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 249.644873][T10368] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect(r0, 0x0, 0x0) 04:18:00 executing program 5: 04:18:00 executing program 1: 04:18:00 executing program 3: 04:18:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:00 executing program 5: 04:18:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect(r0, 0x0, 0x0) 04:18:00 executing program 1: 04:18:00 executing program 2: 04:18:01 executing program 3: 04:18:01 executing program 5: [ 249.941700][T10389] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 249.971475][T10389] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:01 executing program 1: 04:18:01 executing program 2: 04:18:01 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) 04:18:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:01 executing program 3: 04:18:01 executing program 5: 04:18:01 executing program 2: 04:18:01 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) 04:18:01 executing program 3: 04:18:01 executing program 1: 04:18:01 executing program 5: 04:18:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:01 executing program 3: 04:18:01 executing program 2: 04:18:01 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) 04:18:01 executing program 1: 04:18:01 executing program 5: 04:18:01 executing program 2: 04:18:01 executing program 3: 04:18:01 executing program 4: 04:18:01 executing program 1: 04:18:01 executing program 5: 04:18:01 executing program 3: 04:18:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:01 executing program 2: 04:18:01 executing program 5: 04:18:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 04:18:01 executing program 2: 04:18:01 executing program 4: 04:18:01 executing program 1: 04:18:02 executing program 1: 04:18:02 executing program 5: 04:18:02 executing program 3: 04:18:02 executing program 2: 04:18:02 executing program 4: 04:18:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:02 executing program 1: 04:18:02 executing program 5: 04:18:02 executing program 4: 04:18:02 executing program 2: 04:18:02 executing program 3: 04:18:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:02 executing program 1: 04:18:02 executing program 2: 04:18:02 executing program 3: 04:18:02 executing program 4: 04:18:02 executing program 5: 04:18:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:02 executing program 4: 04:18:02 executing program 2: 04:18:02 executing program 5: 04:18:02 executing program 1: 04:18:02 executing program 4: 04:18:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001f000)=""/102375, 0x18fe7}], 0x1}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/88, 0x58}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) 04:18:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd}, 0x2) shutdown(r3, 0x0) 04:18:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/234, 0xea}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000080)=""/17, 0x11}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)=""/199}], 0x5d) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/143, 0x8f}], 0x1}, 0x0) shutdown(r3, 0x0) 04:18:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f000001f000)=""/102375, 0x18fe7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb}, 0x6) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/88, 0x58}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r3, 0x0) 04:18:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x50}], 0x60}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x2) shutdown(r3, 0x0) [ 251.791956][T10499] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 251.914848][T10519] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 252.042245][T10536] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 252.121393][T10542] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 252.237337][T10548] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 252.420840][T10554] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 252.506482][T10560] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/4102, 0x1006}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10}, 0x0) r4 = dup(r3) shutdown(r4, 0x0) 04:18:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/4102, 0x1006}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x11}, 0x0) r4 = dup(r3) shutdown(r4, 0x0) 04:18:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/234, 0xea}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)=""/17, 0x11}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/4123, 0x101b}, {0x0}], 0x2}, 0x42) shutdown(r3, 0x0) 04:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001f000)=""/102375, 0x18fe7}], 0x1}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x1a}, 0x0) shutdown(r3, 0x0) 04:18:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/4102, 0x1006}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10}, 0x40042) r4 = dup(r3) shutdown(r4, 0x0) [ 252.706860][T10584] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 252.828637][T10601] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0), 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 253.115767][T10625] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0), 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 253.293502][T10630] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0), 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 253.483606][T10636] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/4102, 0x1006}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10}, 0x0) r4 = dup(r3) shutdown(r4, 0x0) 04:18:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001f000)=""/102375, 0x18fe7}], 0x1}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/88, 0x58}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r3, 0x0) 04:18:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001f000)=""/102375, 0x18fe7}, {0x0}, {0x0}], 0x3}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/88, 0x58}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r3, 0x0) 04:18:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x50}], 0x60}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd}, 0x0) shutdown(r3, 0x0) 04:18:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa94100000000", 0x1d, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc}, 0x0) shutdown(r3, 0x0) [ 253.803364][T10665] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa94100000000", 0x1d, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 254.010999][T10687] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa94100000000", 0x1d, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e", 0x2c, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 254.248263][T10699] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 254.374000][T10705] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e", 0x2c, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e", 0x2c, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 254.491706][T10711] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001f000)=""/102375, 0x18fe7}], 0x1}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/88, 0x58}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) 04:18:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400", 0x33, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 254.590314][T10721] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/4102, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)=""/89}, {&(0x7f0000000140)=""/63}], 0xf}, 0x40042) r4 = dup(r3) shutdown(r4, 0x0) 04:18:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/237, 0xed}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000400)=""/188, 0xbc}, {0x0}], 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r5 = dup(r3) shutdown(r5, 0x0) 04:18:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400", 0x33, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x50}], 0x60}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xf}, 0x2) shutdown(r3, 0x0) 04:18:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/237, 0xed}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000400)=""/188, 0xbc}, {0x0}], 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r5 = dup(r3) shutdown(r5, 0x0) [ 254.807674][T10741] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400", 0x33, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 254.952168][T10765] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc676", 0x37, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 255.079671][T10783] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc676", 0x37, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 255.277778][T10790] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc676", 0x37, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 255.458019][T10797] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000040)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r5 = dup(r3) shutdown(r5, 0x0) [ 255.592246][T10805] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) 04:18:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x50}], 0x60}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc}, 0x0) shutdown(r3, 0x0) 04:18:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/4102, 0x1006}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10}, 0x0) r4 = dup(r3) shutdown(r4, 0x0) 04:18:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x50}], 0x60}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb}, 0x0) shutdown(r3, 0x0) 04:18:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/237, 0xed}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000400)=""/188, 0xbc}, {0x0}], 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r5 = dup(r3) shutdown(r5, 0x0) [ 255.891661][T10834] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 256.008891][T10854] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 256.158109][T10868] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 256.293823][T10875] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) [ 256.467414][T10882] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:18:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 04:18:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0xec4473b3510005, 0x0) 04:18:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, 0x0) [ 256.627709][T10892] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001f000)=""/102375, 0x18fe7}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/88, 0x58}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r3, 0x0) 04:18:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/4102, 0x1006}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10}, 0x40042) r4 = dup(r3) shutdown(r4, 0x0) 04:18:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001f000)=""/102375, 0x18fe7}], 0x1}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00546) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/88, 0x58}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r3, 0x0) 04:18:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/33, 0x21}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r4, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r5 = dup(r3) shutdown(r5, 0x0) 04:18:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/73, 0x50}], 0x60}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb}, 0x2) shutdown(r3, 0x0) [ 256.799176][T10911] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, 0x0) [ 256.954773][T10930] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}, {@auto_da_alloc_val={'auto_da_alloc'}}]}) [ 257.054098][T10944] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 257.063870][T10944] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@dax='dax'}]}) [ 257.171662][T10956] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 257.180803][T10956] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) [ 257.275883][T10962] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) [ 257.413400][T10968] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e0246e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 04:18:08 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 257.570116][T10975] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 04:18:08 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x0, 0x0) 04:18:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:18:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x5a, 0x705}, 0x20}}, 0x0) 04:18:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) 04:18:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) 04:18:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket(0x15, 0x80005, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 04:18:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:18:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0xffffffffffffffd4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 04:18:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) [ 258.005278][ T3685] usb 2-1: new high-speed USB device number 2 using dummy_hcd 04:18:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) 04:18:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000220001"], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x8}, 0x0) [ 258.248164][ T3685] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 258.259812][ T3685] usb 2-1: config 0 has no interface number 0 [ 258.267060][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.275531][ T3685] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 258.334339][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.495817][ T3685] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 258.508038][ T3685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.517143][ T3685] usb 2-1: Product: ꢞ捘 [ 258.521887][ T3685] usb 2-1: SerialNumber: Л [ 258.531957][ T3685] usb 2-1: config 0 descriptor?? [ 258.815635][ T3685] orinoco_usb: Didn't find the required bulk endpoints [ 258.822573][ T3685] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 258.845907][ T3685] usb 2-1: USB disconnect, device number 2 [ 259.565849][T10179] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 259.805910][T10179] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 259.814206][T10179] usb 2-1: config 0 has no interface number 0 [ 259.821561][T10179] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 260.005398][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 260.014539][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.030497][T10179] usb 2-1: Product: ꢞ捘 [ 260.045120][T10179] usb 2-1: SerialNumber: Л [ 260.071934][T10179] usb 2-1: config 0 descriptor?? 04:18:11 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:11 executing program 4: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 04:18:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) fcntl$getflags(r0, 0x1) 04:18:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x1, 0x9, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000040), 0x400, r0}, 0x38) 04:18:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x800000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 04:18:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) ioctl(0xffffffffffffffff, 0x800, &(0x7f0000000100)="af22ec2f32f65c468711d0e1b506e50b42894dc337305af7389a2add59ee8f588090860c10e988486642287d521c2762f0a2c91eb2d4cfb37de37a1e4a817b7422c645f3ca933bd93ff8f7add516a89839db2ba4cee15b77758c4ee27eeb") [ 260.375468][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 260.382488][T10179] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 260.430707][T10179] usb 2-1: USB disconnect, device number 3 04:18:11 executing program 0: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) ioctl(0xffffffffffffffff, 0x800, &(0x7f0000000100)="af22ec2f32f65c468711d0e1b506e50b42894dc337305af7389a2add59ee8f588090860c10e988486642287d521c2762f0a2c91eb2d4cfb37de37a1e4a817b7422c645f3ca933bd93ff8f7add516a89839db2ba4cee15b77758c4ee27eeb") 04:18:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000430007031dfffd946fa2830020020a0009000000001d85680c1ba3a20400ff7e280000002600ffff", 0x1a}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) [ 260.885196][T10179] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 260.965181][ T3685] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 260.987787][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:18:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 04:18:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x800000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 261.128522][T10179] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 261.144527][T10179] usb 2-1: config 0 has no interface number 0 [ 261.174124][T10179] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 261.186647][ T3685] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 261.194819][ T3685] usb 1-1: config 0 has no interface number 0 [ 261.232633][ T3685] usb 1-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping 04:18:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 261.417625][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 261.456536][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.466211][ T3685] usb 1-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 261.493395][ T3685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.526304][T10179] usb 2-1: Product: ꢞ捘 [ 261.541038][ T3685] usb 1-1: Product: ꢞ捘 [ 261.548184][T10179] usb 2-1: SerialNumber: Л [ 261.559233][ T3685] usb 1-1: SerialNumber: Л [ 261.581400][T10179] usb 2-1: config 0 descriptor?? [ 261.593227][ T3685] usb 1-1: config 0 descriptor?? [ 261.928118][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 261.939590][T10179] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 261.951631][T10179] usb 2-1: USB disconnect, device number 4 [ 261.960875][ T3685] orinoco_usb: Didn't find the required bulk endpoints [ 261.968321][ T3685] orinoco_usb: probe of 1-1:0.19 failed with error -14 [ 261.984782][ T3685] usb 1-1: USB disconnect, device number 2 04:18:13 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="d903a5942e1f593e7fbc93b5edfb13c6e525554aae972252127b55dafecccb50c740d4943521de89c5a7bfc5619bcc816de566b5bfe2f08ac547c00fb6dc19327c9117a70719202687a1784d604d8804189d38f5a944c56a39f9ed51867d05f8694b45f7b1f4e5ddfcd9f20dd94e37faf60373b9821d1ea9745a07974aafde0e1c81d8220e5304461eac3ef2a4519fb5e9724a16255257add46094c3cfddad2ae36158352e738ea28ad9964fddffc037fed2b4ad198b58f89278fe0a3d3b89d18d8bc85977789f4e010c7f8760c3098f764a6b6055e43735a958cad376562f5ade0e81b2c86416311d105d9230edca45cd083fcc3ea606f62210b26010c41032676a"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:13 executing program 4: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 04:18:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000430007031dfffd946fa2830020020a0009000000001d85680c1ba3a20400ff7e280000002600ffff", 0x1a}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) 04:18:13 executing program 3: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 04:18:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x800000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 04:18:13 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x28, 0x801, 0x0, &(0x7f0000000100)) [ 262.597497][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:18:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) [ 262.935049][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd 04:18:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) 04:18:14 executing program 5: [ 263.166801][ T49] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 263.190391][ T49] usb 2-1: config 0 has no interface number 0 [ 263.261907][ T49] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping 04:18:14 executing program 5: 04:18:14 executing program 2: 04:18:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r1, r0, 0x0, 0x80006) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) [ 263.585830][ T49] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 263.627114][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.685773][ T49] usb 2-1: Product: ꢞ捘 [ 263.739744][ T49] usb 2-1: SerialNumber: Л [ 263.797171][ T49] usb 2-1: config 0 descriptor?? [ 264.127892][ T49] orinoco_usb: Didn't find the required bulk endpoints [ 264.138287][ T49] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 264.171382][ T49] usb 2-1: USB disconnect, device number 5 04:18:15 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:15 executing program 5: 04:18:15 executing program 2: 04:18:15 executing program 0: 04:18:15 executing program 4: 04:18:15 executing program 3: 04:18:15 executing program 4: 04:18:15 executing program 2: 04:18:15 executing program 0: 04:18:15 executing program 5: 04:18:15 executing program 3: 04:18:15 executing program 2: [ 265.024936][T10179] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 265.237477][T10179] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 265.245739][T10179] usb 2-1: config 0 has no interface number 0 [ 265.251877][T10179] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 265.424880][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 265.434534][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.442956][T10179] usb 2-1: Product: ꢞ捘 [ 265.447756][T10179] usb 2-1: SerialNumber: Л [ 265.453344][T10179] usb 2-1: config 0 descriptor?? [ 265.735230][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 265.742210][T10179] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 265.765610][T10179] usb 2-1: USB disconnect, device number 6 04:18:17 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) 04:18:17 executing program 4: 04:18:17 executing program 5: 04:18:17 executing program 0: 04:18:17 executing program 3: 04:18:17 executing program 2: 04:18:17 executing program 4: 04:18:17 executing program 3: 04:18:17 executing program 2: 04:18:17 executing program 0: 04:18:17 executing program 5: 04:18:17 executing program 0: [ 266.634776][T10179] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 266.844842][T10179] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 266.853090][T10179] usb 2-1: config 0 has no interface number 0 [ 266.874826][T10179] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 267.065588][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 267.074639][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.083473][T10179] usb 2-1: Product: ꢞ捘 [ 267.088446][T10179] usb 2-1: SerialNumber: Л [ 267.095724][T10179] usb 2-1: config 0 descriptor?? [ 267.375066][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 267.382008][T10179] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 267.392633][T10179] usb 2-1: USB disconnect, device number 7 04:18:18 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) 04:18:18 executing program 0: 04:18:18 executing program 4: 04:18:18 executing program 3: 04:18:18 executing program 2: 04:18:18 executing program 5: 04:18:19 executing program 0: 04:18:19 executing program 2: 04:18:19 executing program 3: 04:18:19 executing program 4: 04:18:19 executing program 5: 04:18:19 executing program 2: [ 268.284661][ T4143] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.528476][ T4143] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 268.539894][ T4143] usb 2-1: config 0 has no interface number 0 [ 268.554918][ T4143] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 268.764769][ T4143] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 268.774096][ T4143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.782814][ T4143] usb 2-1: Product: ꢞ捘 [ 268.787944][ T4143] usb 2-1: SerialNumber: Л [ 268.793267][ T4143] usb 2-1: config 0 descriptor?? [ 269.075096][ T4143] orinoco_usb: Didn't find the required bulk endpoints [ 269.082215][ T4143] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 269.105360][ T4143] usb 2-1: USB disconnect, device number 8 04:18:20 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) 04:18:20 executing program 0: 04:18:20 executing program 3: 04:18:20 executing program 4: 04:18:20 executing program 5: 04:18:20 executing program 2: [ 269.565816][ T0] NOHZ: local_softirq_pending 08 04:18:20 executing program 2: 04:18:20 executing program 3: 04:18:20 executing program 5: 04:18:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:18:20 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001440)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, &(0x7f00000014c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x1c, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc000011}, 0x0) [ 269.837074][T11289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 270.024649][ T4143] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 270.264997][ T4143] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 270.273106][ T4143] usb 2-1: config 0 has no interface number 0 [ 270.313603][ T4143] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 270.524587][ T4143] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 270.533704][ T4143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.541845][ T4143] usb 2-1: Product: ꢞ捘 [ 270.546617][ T4143] usb 2-1: SerialNumber: Л [ 270.553844][ T4143] usb 2-1: config 0 descriptor?? [ 270.845483][ T4143] orinoco_usb: Didn't find the required bulk endpoints [ 270.852907][ T4143] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 270.863721][ T4143] usb 2-1: USB disconnect, device number 9 04:18:22 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:18:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xd2, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "8f22a6", 0x8, 0x11, 0x0, @remote, @ipv4={[], [], @private}, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "684d21129fa5d6b8b943083f7fe6f4064360311f238be23c207370eb43eec711", "edbacb42b93f9f01acd93bf472db3535a5ea901764a0b0c8fcdd044115098c4f8ec2047e90df2432182cdea2f9b9b2ef", "0f8bfb76147c8bc535a31eacccf867dc4a01076137343ed27163683d", {"6068bc972c3416bdc3694c38cf45d378", "6c74526296e1597c812bf7c35ed8ae2c"}}}}}}}}, 0x0) 04:18:22 executing program 2: 04:18:22 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:22 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:18:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x1, 0x9, 0x400, 0xc}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x400, r0}, 0x38) 04:18:22 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:22 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:18:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310dadd22e300000000000000000001008000", 0xa}, 0x60) [ 271.694570][ T4143] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 271.914522][ T4143] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 271.922746][ T4143] usb 2-1: config 0 has no interface number 0 [ 271.944512][ T4143] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 272.114781][ T4143] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 272.131780][ T4143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.147384][ T4143] usb 2-1: Product: ꢞ捘 [ 272.152174][ T4143] usb 2-1: SerialNumber: Л [ 272.158709][ T4143] usb 2-1: config 0 descriptor?? [ 272.434832][ T4143] orinoco_usb: Didn't find the required bulk endpoints [ 272.441761][ T4143] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 272.465237][ T4143] usb 2-1: USB disconnect, device number 10 04:18:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:23 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:23 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:18:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310dadd22e300000000000000000001008000", 0xa}, 0x60) 04:18:23 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:18:23 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0xb1c661d398500c73) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r3, 0x208200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffa) 04:18:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) [ 272.998573][ T27] audit: type=1800 audit(1592453904.035:2): pid=11407 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15897 res=0 04:18:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310dadd22e300000000000000000001008000", 0xa}, 0x60) 04:18:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:24 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8f22a6", 0x8, 0x11, 0x0, @remote, @ipv4={[], [], @empty}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) [ 273.133171][ T27] audit: type=1800 audit(1592453904.165:3): pid=11413 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="" name="bus" dev="sda1" ino=15897 res=0 04:18:24 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0xb1c661d398500c73) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r3, 0x208200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffa) 04:18:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:24 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)={0x8}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x23, &(0x7f0000000140)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, r4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e22, 0x6, @loopback, 0x400}}, [0x1, 0x80000001, 0x1, 0x0, 0x7, 0x62c55d86, 0x2, 0x25c, 0x1dde, 0x10000, 0x1, 0x7ff, 0x4, 0x3, 0x7]}, &(0x7f0000000200)=0x100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:18:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 04:18:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) [ 273.344459][ T49] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 273.405521][ T27] audit: type=1800 audit(1592453904.435:4): pid=11431 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15894 res=0 04:18:24 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) [ 273.587744][ T49] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 273.597073][ T49] usb 2-1: config 0 has no interface number 0 [ 273.611431][ T49] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 273.794788][ T49] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 273.803916][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.816368][ T49] usb 2-1: Product: ꢞ捘 [ 273.821107][ T49] usb 2-1: SerialNumber: Л [ 273.829354][ T49] usb 2-1: config 0 descriptor?? [ 274.114823][ T49] orinoco_usb: Didn't find the required bulk endpoints [ 274.121726][ T49] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 274.132117][ T49] usb 2-1: USB disconnect, device number 11 04:18:25 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="d903a5942e1f593e7fbc93b5edfb13c6e525554aae972252127b55dafecccb50c740d4943521de89c5a7bfc5619bcc816de566b5bfe2f08ac547c00fb6dc19327c9117a70719202687a1784d604d8804189d38f5a944c56a39f9ed51867d05f8694b45f7b1f4e5ddfcd9f20dd94e37faf60373b9821d1ea9745a07974aafde0e1c81d8220e5304461eac3ef2a4519fb5e9724a16255257add46094c3cfddad2ae36158352e738ea28ad9964fddffc037fed2b4ad198b58f89278fe0a3d3b89d18d8bc85977789f4e010c7f8760c3098f764a6b6055e43735a958cad376562f5ade0e81b2c86416311d105d9230edca45cd083fcc3ea606f62210b26010c41032676a"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:18:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 04:18:25 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)={0x8}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x23, &(0x7f0000000140)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, r4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e22, 0x6, @loopback, 0x400}}, [0x1, 0x80000001, 0x1, 0x0, 0x7, 0x62c55d86, 0x2, 0x25c, 0x1dde, 0x10000, 0x1, 0x7ff, 0x4, 0x3, 0x7]}, &(0x7f0000000200)=0x100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:18:25 executing program 4: bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:25 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)={0x8}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x23, &(0x7f0000000140)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, r4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e22, 0x6, @loopback, 0x400}}, [0x1, 0x80000001, 0x1, 0x0, 0x7, 0x62c55d86, 0x2, 0x25c, 0x1dde, 0x10000, 0x1, 0x7ff, 0x4, 0x3, 0x7]}, &(0x7f0000000200)=0x100) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:18:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) 04:18:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 04:18:25 executing program 4: bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) 04:18:25 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) 04:18:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:18:25 executing program 4: bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) [ 274.997289][ T9782] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 275.257184][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 275.287244][ T9782] usb 2-1: config 0 has no interface number 0 [ 275.293489][ T9782] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 275.517183][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 275.531780][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.557905][ T9782] usb 2-1: Product: ꢞ捘 [ 275.586696][ T9782] usb 2-1: SerialNumber: Л [ 275.603168][ T9782] usb 2-1: config 0 descriptor?? [ 275.885110][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 275.892049][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 275.902437][ T9782] usb 2-1: USB disconnect, device number 12 04:18:27 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:18:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:27 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)={0x8}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:18:27 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) pwritev(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)='N', 0x1}], 0x2, 0x22) 04:18:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:18:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:27 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:27 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x129c01) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0xd18, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xb0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0x34, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x3a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x800, 0x9}, {0x0, 0x1}]}, 0x14, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x3a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@getpolicy={0x11e8, 0x15, 0x200, 0x70bd26, 0x25dfdbfd, {{@in=@remote, @in6=@private1, 0x4e24, 0x6, 0x4e23, 0x9112, 0x2, 0x20, 0x20, 0x29, r4, 0xee00}, 0x0, 0x2}, [@algo_aead={0x79, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x168, 0xa0, "f941ba4e06b6960421521d22da126c3a2c83a2f9a60014fefddfd27193b27932da13c1d9710e85f1daea0e0606"}}, @lifetime_val={0x24, 0x9, {0x334, 0x0, 0x800, 0x2}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x0, 0x3, 0x1000, "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"}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, [], 0x2b}, @in=@private=0xa010101, 0xa, 0x2, 0x2}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x8d}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, [], 0x30}, @in6=@local, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x100, 0x32, r6, r7}, {0x3, 0x3, 0x4, 0x5, 0x1, 0x3, 0x5, 0x2}, {0x0, 0x100, 0x7, 0x2}, 0x3, 0x0, 0x0, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, r10}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x440d0}, 0x0) 04:18:27 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)={0x8}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 04:18:27 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) [ 276.712185][T11544] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.726817][ T12] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 276.826909][T11544] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.978298][ T12] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 276.986804][ T12] usb 2-1: config 0 has no interface number 0 [ 276.992952][ T12] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 277.184287][ T12] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 277.193448][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.205264][ T12] usb 2-1: Product: ꢞ捘 [ 277.210049][ T12] usb 2-1: SerialNumber: Л [ 277.219987][ T12] usb 2-1: config 0 descriptor?? [ 277.514610][ T12] orinoco_usb: Didn't find the required bulk endpoints [ 277.521575][ T12] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 277.532845][ T12] usb 2-1: USB disconnect, device number 13 04:18:29 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:18:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 04:18:29 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:29 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x129c01) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0xd18, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xb0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0x34, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x3a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x800, 0x9}, {0x0, 0x1}]}, 0x14, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x3a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@getpolicy={0x11e8, 0x15, 0x200, 0x70bd26, 0x25dfdbfd, {{@in=@remote, @in6=@private1, 0x4e24, 0x6, 0x4e23, 0x9112, 0x2, 0x20, 0x20, 0x29, r4, 0xee00}, 0x0, 0x2}, [@algo_aead={0x79, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x168, 0xa0, "f941ba4e06b6960421521d22da126c3a2c83a2f9a60014fefddfd27193b27932da13c1d9710e85f1daea0e0606"}}, @lifetime_val={0x24, 0x9, {0x334, 0x0, 0x800, 0x2}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x0, 0x3, 0x1000, "ecd0b882002a87e8698982703fa934c4af3d0e0f5c4d3f648f9296ff0b349cd8647a63a7c955c02894baeace97fa8bafe8881085c452f243788c9b40957eb461457ff6c112ab6078e436c8f0dca24a34ddc75b3875ebc1f92f042c6c11d3575ea026d725cc88340fc741526fca8b041bb8bc2a96deeb8977deea37674e9edd66ba5ead7ea3dcc910464c943ef89eadeaa6847da433ca6f1cf1f5ed08f71a035d60eb0248d337e6f96e25029ebb4e900ef227a980b1f1f621d1c0d450634e0a9dfc370d9ce465ff97b44f591620d47c16ab110f6b6fcee7c8ae030caa80f1c6019a9d4037febbc737a823731bb7f1fd3cd751acefef218f61f16d54667170d90f337b25c13700b4f6b522ecd42a12033e259832928d6d2ae30bce5cf25195789cc7b1e4321e6655098e34681fe0fdaf426b8ef2c5b9fd41447d718758dcc682271c9e94f20f0bb46e7460af12b411de0e5824b5c8ee2a907fb71b6cde83e5760d7c86fa0bc22d713d3737c2b3a544f64c0ee9b8fde82e8f91ea5ba3a5efb40e2f1ffa795326db4e9e88e81922ec4764425298c036020fdbfdeff025af3cfe0f8a8d410e600c6045de790061b754aeb1a3cbbf775959075a73f8ecc74c36c34fc81503201dcc47e03f2eaf14752c83a45a3635e3291df5c26f9161f243a1e7d5b1e058a3f046871de71febb53a03306104d51db63293e1df111934ca6fcae5dcdbfeee04839bed0305b7e5d7825fb32a2715ea122ae2891dd7d1c78e2600adb4fde525ac318f6c409c77bd478fcc6456520dd537d60d09745b102a6bbe12c5042336c63d5c838340dc89a3b6978119168cd85cd9e4b492d00bb7a1d3f031b970cbdf10a6b5f37513f9083a8bab87b7a9254a8b965658019101d0ce37cde8421d5bc672918152a856234cd52a3a9f7b63f7b72f803da6191ec72b2328afa0a1a8aac2485ad3e26388bf33b8e101528733ed51e879844ccd5a75e2a66c728aac0d51caa2e544e18e1622b44a5b91d73ade0784409afe0856bfbe2a651762130aea5eb8e4b38605e70608bc259febe24ed17b355efcd7bbb6a30fdc0cf4ac55078dc2f0d7668a6a7ada4d371bd385bd5bf4cf03a86eb575920fd5c58c363bd16950275e2286f690e221d2272addaffb7dc4600ef4911bff7735ee9f8468c8809366f0f04e0d3591d5401d7e844522b01002db74e3b52c7d12e5324ade0927075a284a07fd1d11e46989852ea475fd0234f8956312a334221d591fc8652cdd41005470d72fbeb4bcae0b203538ed17cb978588e9b9374a7f94edd395d32d060122a27f954b218f485a889328db36dcc07faf01ce771148fe73e33fdba09764e7c894af734bf33cb1be0b91aca55912b781f81c3b829fce72711f007e58f04a46e669fd01fe94c1da57f547a7438704aa784d3cf7791bb596e1e4f6f9e1d5dceaf1d85ebc44be083700941d0f3ec4485b07aa59826731c091c4eed33afe6809490c240ad323c53bfd55d13d84da0163bf75c4875c414ca4ec5251b2331a6e7f96d02ea5b8b2e5d8a21d5f54da54bf6cf9e2973b0ea681a11671e75a5148f310088cec00c97866501a81189c18226068da32823e341927009b02405a4dbcca75abb731deba0f4333a163bad1dd10f5f942975362460e05cbbd31091b4aa1f700ddcfbbbb4f2615bacec07176764b6baf2018af7adc6f2fd52219663f34fbcb6796304b8f12752d04be116cec7a674c1e1c90eddf3b09a24c3d43c0db60e4734154d4dcbf8ecc04f276c9946cd5a89390c6a9dd202d813b3adaf81f206acff228a552221085514cfd191ea118afdae327631dde2a4736c80bd6927677c37bb14ff5685974fc68ac124ea8e6a31e959040432714a94a6d22cd91bc14fba29b3d156da9d47d6b0fc8528cf35b0dd8d30550cd684b6303b589a18e462c3b60ce01157386a587137431eb1bf1be1e7524ceb16cfd5cf0a8382edbe22956de294f5e32d22b59e060bb10b8e2bdd568852a6cc5f36f1740d34b2b43aad651595546d8768ca88843b0534497a0fe4e88a090c4a711dfab2f9e045393cdb3f2bb547f73720a4962b778fa80143eab9f94e3a9f9ce9b8fc5aea1b5aa502218313552a6448d1f7001c40ef9be5ffa4863f5134dfb3ed9da5dc678c6178386639c2a4003af94b26829736c4f118494628b47fba0acb2a75554f188969a4a70fd5e7db9463fcaf0f7cd52753b727acae123231d1c8d68d0ed8495f69c361e846ea964fb0ee0d626ad2515a7df2efc258704bb3f2a9fe78dbbe5ccf687c55f3471e954efaeaff042a6c708a7c2bdc1a223633b7a25175c1c1ee027ef4534c3b00ac4f91cde2d17be90072f136d732c31b466dab82ab21da796b2b622ac5ffd0a34700982f4a902962115d0f3b823ce60092a2cae14b3d15824e496ea31f55b088858a0d193a1cd34fde075a805546d14e5500bdeb5e74da58c8797d0a0fb1c177f05ec51ae1fa585cd6d7fbee4e84bb3dce90e4547a0862472d248d314c47c900464ad970b4dd80e9495acec8d80e644f8da1375abb3cfad62e305e29b24339efba1c042c70843e2f3e46666b59b585cdde9d8e405655b5bddd6085c1788afbd8abd8307905ee23dadad1262fa8eace719da7f0d8e9ea78004ce5397e31908f544a86f8b31524439b0cb6a1d4385df7ed589992fd3d6130d20d00f3f70cd9453189b26b72b740cc47692dc8f9b58826b97ade28fad1e713fd239519c363b05e945b00976f54020c67c131ec5ebffebf0654248dc8844776be18518857c5ab2148d458bfbaf292658fdabf80b1b1d104cc7a6cec49f450dca90ed88add7e037966bc3795a3ce7ba78ff6de852e158ddd9ece88b17bd7412159d0e40cbea28932205363e551ebd2c2fadb5839c17ac657adf8c043e5bb25fb7b9c434b040214e9937b32e93e81ebd180f195b0063b063de3d8f85693c95a3d3a8a2861c1105bd708e123b7f289284cc5ca2e5021a7783f82080d1d102ce38bd9a7325d97a7e151084431a83bc23510fa9773aa2a867ae6b818ba31037e4fa998ea15301b78df6dcdc5242df6e9ec60adb73464bb2ea9776763bb843459445fa490b8978c5badcf115fca9f16f83451e65e8e130cb32618ced00ef3416dccddbab4809a58b4a335cdaba32f78c78871d33ea2dda433dfcd677c9c0b0120b464539259b3d3fdecd1b11c0c3acf2b7039ed1bf01f6200312ebfd457ba40c598f502bb59095b2df631249f66a7fc0bf0a342a6d01f9efb8899d4d31e45308f0165014439fb59173b4eed37f5d98df28e65d972f6d3a05ad3533e94292e47b36c349a0a7eafcfb7fc8e3e42ae03389e11b714028606b055db9995a9c58821fafb7f79fa575fac79707875cce17dc1fdaddcd53475fb35a60c20dea98b9c6368bd0b3f3af5ad6c7db06a90c41ce6b187bc7ed7ef508099c10ead3c5b5374845caf9a4e1e4cf5ed362a82234fa4248a228d1f2a75b6d840772a2f5cb9409388f160349edb880c44ad428a5345c8b21865b167ea716664c2a6ac908e673ea05cd9f86a8ee42299da8d79114719e81ec251fd0bcd715b43795c24a65c8f44f70cb63f7d6d8235c373225ec579b07bc71e42d1f0b63497b7b949ecfc95492d2f3c4372becb942f27d53a1cc16e3d92c947d2e4913fc0c4fbbd2a1c07b94a144fdddedf2774a20dc441b3d44a0f6639ccecb35afc2b688facb54d959b5cb6f419da79bf6b97f81f34a93987fbed099f176404cde65ad22418da62c12e714600d728f7e92979187f89fd4a8faf9c1192ba2e5f3a4e0cc4fb0bd872bba443892ab0a01bb4e6f900411190e598178e601355fdac9975646c7e6ead5575ac9a205cb4417dbe56c65cd35e8021c832738e617c65be126adc1275b282bf93fa930d86cc30681f4a41ffa171eda2046a55b295359a393aa621b348edc88404e084f2ae2c6806a1a19c8608e7af171b3606171e5bff310825dbeb954276a93b2da588b3bd24db209cb546dee06c6c7fbaa8386895f6c4b555ed6e61d35bb4f7844e0a38a3fa0c4738239974a8e9aa0bdd13c584e36b5e08bc4364c17fd482d2942e67107a9275a85da78471dacaab7eba2ab36ef025db2d02126817be2031c36cdefb5ecf966569cf2a84dd8d2005a1ae56772f9ec9b75db2ac6ffc2fe4d09dbe43c53fda7d8a93d4487b64bab3d4f0e9e6e19c534ec1c2d8f98f06f1676c7f3db153e83550f92c136fbbbc1ad81dddfb698bae2ea1ff4a838b3c4808f48c52a6ebff1ad4d522c941a5c1bfe220432a24cebff43843ecd6f73992703b32ec5f30c5b927198239d378c47eb93623e30628202917285ee525cc17536e595ed93677ff46ba974d6f75a6f163e7d9efc9338e636e4acc22d6430b0e2baba18708fd0e21e6d8c56fef3f344a10084c50d4c63e9e3618faf5f71814b98eecedf51e50585c58cc8199aadb663e7928449233584c449a3e3ebd74766e923f3c2b14b7a8040347e2ab33a889e8a6319ffce84d03319a61c4a6a28b06a98fff709aa74c0d6af86ac6fd6d98eed264ba243dd3b92aad147d922c9dc886cf4cd82829f859604da0eb0b66dd0e3d6ad108b3b03aff586c37507b5c4a1edf76f593c4867da93c5f317a52d7169b28b39c0ac64543742bfec87eb949241f70c61690cd9854dbf76dbde960a44408d3dff78ab40120db03dda0d90f24c62bbf47e532dd568b998fa0587ced68a60d4bfc18eaa1ee7b270bb9f660c310555fda41b977167a9973b3c69bfa3a7b24422094fabf9d89538b7352b0b71c62feaa9560e792fdc0c055b54b313c628101a798a49ac2668c051054567f7aa4cbc291c0a751c3bbaefdcd50fdc508475309ee013ba5611f98979462504c7bedd97ff90e77570804fba1efc1513bc305cea2e9c32a3304986a34b31921307d5e225b76552237262a08c0a64d491434e8249236262e43bea2f2d577038af11fdb2141fa005fd2e8c6e3f1fe5c3757961011b1b3de0a0bc310e49c2f5782c651092c8e744dd513882aab25e1227fb4085926c3c7e3c9418b4b816d55c5de4f5a4cbf7616d1cd5f0e7c2b6da008c531891e601df23f2ef3914db5745994f92bf6ab9f57e080c73860f3967adddde7a9113598431ea17013795946cdb3a8828680227e680b395a377afad075a2cc490be7d0aeacd22359dfa0c911b3d68dd5744864b1762763b008091bc5654b88439d2a11f22b3838b21b49adab78215bc46c0fc47a395ce90f574102a6a18492843725314dc8af2d48975f4465c0782e6f8754ce0bb5cafe8ca91ff29d88851b7579fd0ee7cd26ec83ab6f7acc3c28f291e34263a5a918a4b85d7fd9c7aa8d8b16d2e3cb1ec9cbe2b68162d5af30f52ff6992c3cb2acc85d6df98c5dc830999a5ffd8d5e76b56d46a28f47c5fe54409e46ed4624e6ff4a87209169b543dacd9376c94ab129bda381b2d612cea71ac60c4015ace5587efd7934b2c827cb6ea0a8c6738ecdb22a80a41cc1fea6371aa6cc9666625a69b7b3e4c800e101be12b511666be73476873beb30d4eb8c1bbb79707d121b1ca6ca5c1a088cacf754bb3376d65261b10abeb2238caaa9e796ec60f58ea4604a7751f589f23921b4372f2bf7f7be968af8bc59e1e3bef4da563224d7534b53983ff86e0014db852014cb85c35fabe9e5cfa34e6f994f1fabf7bddceb8ae02ec8c1899dde3e57571e68998d16b79a3aa57d93aa544a297d18715c1cddc782b0cd3b17c84339be966e879f02466bc9aeeaefac6fe2906291f6927b49bacacd5bbfa9ed1a9f8dd8b9409"}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, [], 0x2b}, @in=@private=0xa010101, 0xa, 0x2, 0x2}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x8d}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, [], 0x30}, @in6=@local, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x100, 0x32, r6, r7}, {0x3, 0x3, 0x4, 0x5, 0x1, 0x3, 0x5, 0x2}, {0x0, 0x100, 0x7, 0x2}, 0x3, 0x0, 0x0, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, r10}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x440d0}, 0x0) 04:18:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r0, 0x0, 0x0) 04:18:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000308050000000000f4ff000000000000050003000600000014000480080006400000000008000b4000000000060002400002"], 0x38}}, 0x0) 04:18:29 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r0, 0x0, 0x0) [ 278.126324][T11583] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 04:18:29 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001e40)={&(0x7f0000000680)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="98000000000000002900000036"], 0x98}, 0x0) 04:18:29 executing program 3: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2001, 0x3, 0x360, 0x0, 0x150, 0x150, 0x218, 0x150, 0x2c8, 0x1e8, 0x1e8, 0x2c8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x218, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@comment={{0x120, 'comment\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x1}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c0) 04:18:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 04:18:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r0, 0x0, 0x0) [ 278.396507][ T5] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 278.412634][T11599] Cannot find add_set index 0 as target [ 278.614572][ T5] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 278.622682][ T5] usb 2-1: config 0 has no interface number 0 [ 278.641048][ T5] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 278.814367][ T5] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 278.823474][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.831909][ T5] usb 2-1: Product: ꢞ捘 [ 278.836896][ T5] usb 2-1: SerialNumber: Л [ 278.844053][ T5] usb 2-1: config 0 descriptor?? [ 279.124472][ T5] orinoco_usb: Didn't find the required bulk endpoints [ 279.131669][ T5] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 279.142218][ T5] usb 2-1: USB disconnect, device number 14 04:18:30 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:18:30 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:30 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001e40)={&(0x7f0000000680)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="98000000000000002900000036"], 0x98}, 0x0) 04:18:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 04:18:30 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 04:18:30 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 04:18:30 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:30 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x0, 0x0) 04:18:31 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:31 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) [ 280.016659][ T4143] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 280.244336][ T4143] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 280.252459][ T4143] usb 2-1: config 0 has no interface number 0 [ 280.270122][ T4143] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 280.484082][ T4143] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 280.502586][ T4143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.514434][ T4143] usb 2-1: Product: ꢞ捘 [ 280.519198][ T4143] usb 2-1: SerialNumber: Л [ 280.539346][ T4143] usb 2-1: config 0 descriptor?? [ 280.814830][ T4143] orinoco_usb: Didn't find the required bulk endpoints [ 280.821748][ T4143] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 280.833802][ T4143] usb 2-1: USB disconnect, device number 15 04:18:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:32 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x1, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000", 0x40000000000001}, 0x60) 04:18:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 04:18:32 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:32 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:18:32 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:18:32 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:32 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)) [ 281.593102][T11695] x_tables: duplicate underflow at hook 2 04:18:32 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:32 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:32 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) 04:18:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) [ 281.962902][T11713] x_tables: duplicate underflow at hook 2 04:18:33 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0xa, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:33 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:18:33 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:33 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:18:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:33 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) 04:18:33 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a7a, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) fcntl$setstatus(r2, 0x407, 0x0) close(r1) 04:18:33 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:33 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000002c0)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 04:18:33 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/138, 0x207a0cf4) 04:18:33 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005070000000076a4000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000002c"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 04:18:33 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:33 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, 0x0, 0x0) 04:18:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:33 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, 0x0, 0x0) 04:18:34 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2309895f118f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa8b00000000000001008000"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0xa, 0x0, 0x0) 04:18:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000a06010100000000000000000000000005000100060000000900020073797a30000000000c000780"], 0x34}}, 0x0) 04:18:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 04:18:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 04:18:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000002c0)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 283.417494][T11792] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 283.468447][T11796] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 04:18:34 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x400000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) fadvise64(r1, 0x0, 0x0, 0x4) 04:18:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:34 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:34 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000002060102f00000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060013001c0007800600044000000000060005400000000008000640"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 04:18:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 04:18:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, 0x0, 0x0) 04:18:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) [ 283.780023][ T27] audit: type=1804 audit(1592453914.816:5): pid=11818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir234228757/syzkaller.2yA1oQ/55/bus" dev="sda1" ino=15991 res=1 04:18:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001040), 0x1000) 04:18:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) [ 284.045523][T11829] input: syz0 as /devices/virtual/input/input5 04:18:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) [ 284.097502][T11829] input: syz0 as /devices/virtual/input/input6 04:18:35 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(0x0) set_robust_list(&(0x7f0000000080)={0x0, 0x8400, &(0x7f00000000c0)}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000000)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000006, 0x100000000000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) [ 284.566192][ T27] audit: type=1804 audit(1592453915.606:6): pid=11855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir234228757/syzkaller.2yA1oQ/55/bus" dev="sda1" ino=15991 res=1 04:18:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x400000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) fadvise64(r1, 0x0, 0x0, 0x4) 04:18:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:18:35 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x0, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:35 executing program 0: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000d0a010100000000000000000400000023e5090000000080300002802bac54ab98dd1778a3cb638ad8f65ea3795a98b2750ee5f100000000000000000000000000000000000000004c6393b35dd5b9a60fa41f4ff5353a7a0ad95d5fa9a6ee345d66f5d3abfdab742e77b07e4964f17a1870dfecb81fae98b45205c3de8678f623"], 0x4c}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) 04:18:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000001740)=0x3f7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbb73f, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 284.858300][T11868] dns_resolver: Unsupported server list version (0) [ 284.873500][T11869] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:18:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) 04:18:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000600300009800000068010000680100006801000068010000c8020000c8020000c8020000c8020000c802000004000000000000000000000000000000ac1414bb0000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380074696d650000000000d50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380160010000000000000000000000000000000000000000c800636f6e6e747261636b0000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000ac1e0001fdff00000000000000000000000001ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000928eb13735d0bb6007190000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:18:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 284.896330][ T27] audit: type=1804 audit(1592453915.936:7): pid=11874 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir234228757/syzkaller.2yA1oQ/56/bus" dev="sda1" ino=15993 res=1 [ 284.934203][T11875] dns_resolver: Unsupported server list version (0) [ 285.059389][T11882] x_tables: duplicate underflow at hook 2 [ 285.063965][T11884] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 285.083347][T11885] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 04:18:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 04:18:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000580)="580000001400add427323b472545b45602117fffffff810204004e227f000001925aa80020007b00090080007f000001e809000000ff0000f069ccdcff74fc3ac7", 0x41}, {&(0x7f0000000200)="84e4bdb8cb93bc56849414a7a0a2b4d02e179545750b7f", 0x17}], 0x2) [ 285.133906][ T4143] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 285.233992][ T4143] usb 2-1: Invalid ep0 maxpacket: 0 04:18:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) [ 285.312306][T11893] x_tables: duplicate underflow at hook 2 [ 285.384183][ T4143] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 285.484280][ T4143] usb 2-1: Invalid ep0 maxpacket: 0 [ 285.489548][ T4143] usb usb2-port1: attempt power cycle 04:18:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 04:18:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x400000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fadvise64(r1, 0x0, 0x0, 0x4) [ 285.796492][ T27] audit: type=1804 audit(1592453916.836:8): pid=11901 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir144444284/syzkaller.pcShTq/62/bus" dev="sda1" ino=15979 res=1 [ 286.213830][ T4143] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 286.493749][ T4143] usb 2-1: device descriptor read/64, error 18 [ 286.593792][ T27] audit: type=1804 audit(1592453917.616:9): pid=11903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir144444284/syzkaller.pcShTq/62/bus" dev="sda1" ino=15979 res=1 [ 286.717983][ T27] audit: type=1804 audit(1592453917.756:10): pid=11909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir144444284/syzkaller.pcShTq/62/bus" dev="sda1" ino=15979 res=1 [ 286.883774][ T4143] usb 2-1: device descriptor read/64, error 18 [ 287.174519][ T4143] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 287.453702][ T4143] usb 2-1: device descriptor read/64, error 18 04:18:38 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x0, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00', 0x201e}) close(r0) 04:18:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r3, &(0x7f00000001c0)="04015927175529e3", 0x8, 0x0, 0x0, 0x0) 04:18:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 04:18:38 executing program 3: r0 = socket(0x8000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x3}}) 04:18:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="ae4a56b3b0002ec93b6060fbab8ab0aaface5a7280ef69792c173808db83784ad8a044d9a565059e", 0x28}], 0x1}}], 0x1, 0x0) [ 287.873815][ T4143] usb 2-1: device descriptor read/64, error 18 [ 287.889202][T11923] x_tables: duplicate underflow at hook 2 04:18:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 04:18:39 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:39 executing program 5: r0 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, &(0x7f00000004c0)=""/72, 0x0, 0x0, 0x4, r0}, 0x38) [ 287.930667][T11928] x_tables: duplicate underflow at hook 2 04:18:39 executing program 4: r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f0000002e80)={0x0, "50f1f248bb7e91fd7072009a1a70b4fef2c9cc4e3fed290fa65995d43deefa8d4be8b2ddfdff7eda5a92f3e7081f645d29a7e0fd449dc61a9527f11c2c6693a990a9b5333d0baba4e883feda3822a2db39f7e587a952425fa4245fcb613b57485db588468b927388a9e44cfc1b0e6793833278de74c9d8302dbbd293f1159fdfaa3b1e0186e9eb7ca0eaca6edd200355358c14d2577e04fe241a630f54c663a7013e17b639"}, 0xad, 0x800) 04:18:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000200)="ce2cbe012a6f01914c371a6663759681ae957b88310b984f13154d1fd52e18ec52fa7448c43977b7405d606f52daffe41c429965048da01c99a3ed4294e9e70a3075881032ac338df9248e8a97fc8a6ecebaed819cda068f0209416b13293541312886557036ea245d65801c7fda1c08d154e1d219498d777ffbca55083b51ee83ff72aa3e07856278135142170a99", 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 288.014032][ T4143] usb usb2-port1: unable to enumerate USB device 04:18:39 executing program 5: chdir(&(0x7f0000739ffe)='..') r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 288.065820][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.139315][T11943] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.573665][ T4143] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 288.683844][ T4143] usb 2-1: Invalid ep0 maxpacket: 0 [ 288.843671][ T4143] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 288.954073][ T4143] usb 2-1: Invalid ep0 maxpacket: 0 [ 288.960371][ T4143] usb usb2-port1: attempt power cycle [ 289.703655][ T4143] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 290.013594][ T4143] usb 2-1: device descriptor read/64, error 18 [ 290.046378][ T0] NOHZ: local_softirq_pending 08 [ 290.403578][ T4143] usb 2-1: device descriptor read/64, error 18 [ 290.693556][ T4143] usb 2-1: new high-speed USB device number 23 using dummy_hcd 04:18:41 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x0, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="d903a5942e1f593e7fbc93b5edfb13c6e525554aae972252127b55dafecccb50c740d4943521de89c5a7bfc5619bcc816de566b5bfe2f08ac547c00fb6dc19327c9117a70719202687a1784d604d8804189d38f5a944c56a39f9ed51867d05f8694b45f7b1f4e5ddfcd9f20dd94e37faf60373b9821d1ea9745a07974aafde0e1c81d8220e5304461eac3ef2a4519fb5e9724a16255257add46094c3cfddad2ae36158352e738ea28ad9964fddffc037fed2b4ad198b58f89278fe0a3d3b89d18d8bc85977789f4e010c7f8760c3098f764a6b6055e43735a958cad376562f5ade0e81b2c86416311d105d9230edca45cd083fcc3ea606f62210b26010c41032676a"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040)="eaf7125c00000400", 0x8) 04:18:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x1}], 0x1) 04:18:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8202adfdff"], 0x10) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r2 = dup(r0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 04:18:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 290.973577][ T4143] usb 2-1: device descriptor read/64, error 18 [ 290.999239][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:18:42 executing program 4: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x20000000000001, &(0x7f0000000180)="9a06e3030004015850a81f78e00818d23a000000", 0x14) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)=""/177, &(0x7f00000000c0)=0xb1) 04:18:42 executing program 0: clock_gettime(0x60000001, &(0x7f0000000000)) 04:18:42 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x60ac, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200) 04:18:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040)="eaef125c00000400", 0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 04:18:42 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:42 executing program 4: socket(0x2, 0x4003, 0x0) [ 291.211325][T11990] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.523492][ T4143] usb 2-1: device descriptor read/64, error -71 [ 291.643649][ T4143] usb usb2-port1: unable to enumerate USB device 04:18:45 executing program 5: r0 = socket(0x2, 0xc003, 0x0) connect$unix(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="7902adf5ffffffff"], 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="066953110548000000007244cc", 0xd}, {&(0x7f0000000f40)="3708c45eed3570c3a5330f254b1988c5d43c840000000000000a9bca86dbb8124a763a012a0f459133f7dcc75aa23a81cd60f46a16c4a5d8ded247df35c9a56a79e5e2aaadda50795cb44aa89bd6c7521f44ca5cf19d3785a7e95738ca2efbbe3c1b17994f09421ec37c9348b62e45cd16bf33d55d831f48e82313e72bd96ec804359f79e3af9e7e2d6b63d78e76de666579ef69aa0a49a6ff8a71ad000000004e2398c6bee967c490c4c79ccd5aa1054c2778abe4d177d57071efbec6368bd57be8acddc30fd514d45654d6834fdac68037af2af3fc0f01b03c1ca2200000000000000003625162767c8c57eecd4e02a69adf30b6b74597220a19d46b0fec7f528da340b0119892e83f063ccaf3d75d67e600cc69156ac21195ee3c496ec531b40f985d013de235a45caa91abae7863a825491f9da422550f2baf9bb17b562bf142d5ad32f293018cbad7d8dc870fc3b30771dc8740bc03f99e8604e46ae288ce23a6570032c1de08caf765e447fda061f0e49d4dfa344b3a4af3f171ec2207ee870fe1341143e2435fa500e0eed7f39f78a583410000000001000000651b2392c7f3e8c3d2881eb401067bc8046d5e39a8d18ca4b445ab454a48364456b0b92400a2aef3e9368f6e14ce76a9804a1e1e30ed5e5ad07edf6d168a4a589306741993ab6f26490e1f69fb0e7411953014f4b3a8d0ddf9a88592a86c985d54ae769f545ac8bf3fc1ba1a21303cd98613b868ac60b4511e47405a81e5bb032772113e02686c3546bf682f6de32011372deb3e06e4280516d9d36c143d6bbcd15a6b7fdbc90ef95fe40d59dd01758dea2de2de0b018111894f6969406ab85428fee32bfdcf7e6f609d48d59dc25d7ca5aa183435b1cf8698c4864688c921055bf63a5790274de5155f0b9b18c94c1351f149a7a1375403874079a4369cf949432b3ad0b979c1371d2566b5d4a9f39d3b7cc80a23f59a47fbae6cfd2ca0f0556883bdafa7cba0a4aa4850df2457f9dda43a1fce1bc1b1a88165cd261a4c0249c0507596a99ea092d539531849d60e3ac16d99b03302e7821b28c5b38479e461a0caaab0d0c58faac4462807aad00e9c1827a90f066af71055334861f9db524c4e0ec16334785e55cbcb09b3b68640eca728e61c5d5f6ae8e71b6f45ba4f7f28aafe461ff73f1bad1a3d4efdc290d596de22e6a14cfeac91ea3e3d98f07964a28817fec2526b5867a9b8b45c4c6e710dc4077ab689789fda99e12c26f38948fde1b598077eb8e88e709b75cd65073b21834c67584f16c597c376e5725fc4ee1d09f3d8b1b566cc981abeff657d914c21ff86c9462eb2aa26ce98e2e039ef276334889eeb8f385edaf639c78696f31bb482d48271a4c2b50e40b394adb93691718dc1190f9231027334f38d9bde2e88c0dd30d834a8a6285c3db5aab93f4129cd76d8db14d5db24c7065f09e8af93ac9e5a47177e64fa5a48e9bdcc661bbe7498d4ee5aa97d29e2367a476f3a056943471a38544c4dd9980772c256045666a7c21cbacd6c74e3d914a8ed1fe8f3d5db9995109c58406f38b694a1e3f13db3141d3c803a12c03bffc314380653548e561d425badb6289a57edbd1b13a207f850835a3b6e7580001c432012da976d8197da5d489c9c83f5884491352aa311309c12fb884d82702ee8f4dcafaf2a3f73ec8e2d868b4ee07b7356e3409bdef3869e1db0db4d88679b44b50c44cc8a9dddfcd388acad1afe250d45325a86aba8f95181e1cde22b5676a16607130e8e5db269a30af6c1", 0x4f0}, {&(0x7f0000000200)="892eadf04950078f2ed34954230641d006c14157cf58b2d735f6a1ae1f4332a1d3c3bdbccc415bce0733fa6b75dffe1753b084002a0900000000000000f409432124bb88ea962d58e3c174125a6983ee867af33ae7213d0f10ade1720dac2c0d7bda8a84d22e67d5cee6dd4f0a07758b399606a9148f1f91098ef6af5a443f7e9f56aa8eca5eb3c8d5626d4ec351aef0536b3d3b15c734d31c8ca7c8846a55e096d0ac22", 0xa4}], 0x3) 04:18:45 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:45 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:45 executing program 0: clock_gettime(0x60000001, &(0x7f0000000000)) 04:18:45 executing program 2: 04:18:45 executing program 4: [ 294.106165][T12011] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:18:45 executing program 2: 04:18:45 executing program 0: clock_gettime(0x60000001, &(0x7f0000000000)) 04:18:45 executing program 5: 04:18:45 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:45 executing program 4: 04:18:45 executing program 2: 04:18:45 executing program 5: [ 294.503348][ T9955] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 294.755950][ T9955] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 294.953386][ T9955] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 294.962506][ T9955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.971838][ T9955] usb 2-1: Product: ꢞ捘 [ 294.976938][ T9955] usb 2-1: SerialNumber: Л [ 294.982625][ T9955] usb 2-1: config 0 descriptor?? [ 295.273649][ T9955] orinoco_usb: Didn't find the required bulk endpoints [ 295.280614][ T9955] orinoco_usb: probe of 2-1:0.0 failed with error -14 [ 295.291326][ T9955] usb 2-1: USB disconnect, device number 24 04:18:46 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:46 executing program 2: 04:18:46 executing program 0: clock_gettime(0x60000001, &(0x7f0000000000)) 04:18:46 executing program 4: 04:18:46 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:46 executing program 5: 04:18:46 executing program 5: 04:18:46 executing program 4: 04:18:46 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) 04:18:46 executing program 2: 04:18:46 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:47 executing program 5: [ 296.123794][ T9782] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 296.333701][ T9782] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 296.513581][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 296.522699][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.531451][ T9782] usb 2-1: Product: ꢞ捘 [ 296.536629][ T9782] usb 2-1: SerialNumber: Л [ 296.542448][ T9782] usb 2-1: config 0 descriptor?? [ 296.823556][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 296.830459][ T9782] orinoco_usb: probe of 2-1:0.0 failed with error -14 [ 296.853828][ T9782] usb 2-1: USB disconnect, device number 25 04:18:48 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:48 executing program 5: 04:18:48 executing program 4: 04:18:48 executing program 2: 04:18:48 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) 04:18:48 executing program 3: r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:48 executing program 2: 04:18:48 executing program 4: 04:18:48 executing program 5: 04:18:48 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) 04:18:48 executing program 3: r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:48 executing program 4: [ 297.725585][T10179] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 297.985824][T10179] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 298.193206][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 298.202336][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.211032][T10179] usb 2-1: Product: ꢞ捘 [ 298.216283][T10179] usb 2-1: SerialNumber: Л [ 298.228705][T10179] usb 2-1: config 0 descriptor?? [ 298.514797][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 298.521752][T10179] orinoco_usb: probe of 2-1:0.0 failed with error -14 [ 298.532716][T10179] usb 2-1: USB disconnect, device number 26 04:18:50 executing program 5: 04:18:50 executing program 2: 04:18:50 executing program 0: clock_gettime(0x60000001, 0x0) 04:18:50 executing program 4: 04:18:50 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:50 executing program 3: r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:50 executing program 2: 04:18:50 executing program 5: 04:18:50 executing program 4: 04:18:50 executing program 0: 04:18:50 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:50 executing program 2: 04:18:50 executing program 4: 04:18:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) close(r2) 04:18:50 executing program 0: 04:18:50 executing program 2: [ 299.453074][ T9782] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 299.683113][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 299.694307][ T9782] usb 2-1: config 0 has no interface number 0 [ 299.700509][ T9782] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 299.883128][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 299.892222][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.900663][ T9782] usb 2-1: Product: ꢞ捘 [ 299.905517][ T9782] usb 2-1: SerialNumber: Л [ 299.910989][ T9782] usb 2-1: config 0 descriptor?? [ 299.954071][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 299.960970][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 300.157152][T10179] usb 2-1: USB disconnect, device number 27 04:18:51 executing program 4: 04:18:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:51 executing program 0: 04:18:51 executing program 5: 04:18:51 executing program 2: 04:18:51 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:51 executing program 2: 04:18:51 executing program 5: 04:18:51 executing program 4: 04:18:51 executing program 0: 04:18:51 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:51 executing program 5: 04:18:52 executing program 2: 04:18:52 executing program 4: 04:18:52 executing program 0: 04:18:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:52 executing program 5: [ 301.105780][T10179] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 301.333187][T10179] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 301.341879][T10179] usb 2-1: config 0 has no interface number 0 [ 301.363025][T10179] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 301.553015][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 301.573971][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.582136][T10179] usb 2-1: Product: ꢞ捘 [ 301.587300][T10179] usb 2-1: SerialNumber: Л [ 301.592656][T10179] usb 2-1: config 0 descriptor?? [ 301.633627][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 301.640597][T10179] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 301.837119][T10179] usb 2-1: USB disconnect, device number 28 04:18:53 executing program 1: syz_usb_connect(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x8, 0x2e, 0xd1, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:53 executing program 2: 04:18:53 executing program 4: 04:18:53 executing program 0: 04:18:53 executing program 5: 04:18:53 executing program 2: 04:18:53 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:53 executing program 5: 04:18:53 executing program 0: 04:18:53 executing program 4: 04:18:53 executing program 2: [ 302.762991][ T9782] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 303.002934][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 303.011115][ T9782] usb 2-1: config 0 has no interface number 0 [ 303.032889][ T9782] usb 2-1: config 0 interface 19 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 303.212963][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 303.222147][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.231083][ T9782] usb 2-1: Product: ꢞ捘 [ 303.236327][ T9782] usb 2-1: SerialNumber: Л [ 303.246816][ T9782] usb 2-1: config 0 descriptor?? [ 303.304217][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 303.311293][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 303.508287][ T5] usb 2-1: USB disconnect, device number 29 04:18:55 executing program 5: 04:18:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:55 executing program 4: 04:18:55 executing program 0: 04:18:55 executing program 1: syz_usb_connect(0x0, 0x44, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x2, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:55 executing program 2: 04:18:55 executing program 2: 04:18:55 executing program 0: 04:18:55 executing program 4: 04:18:55 executing program 5: 04:18:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:55 executing program 2: 04:18:55 executing program 0: 04:18:55 executing program 4: 04:18:55 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x808400, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) 04:18:55 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 304.475334][ T5] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 304.746253][ T5] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 304.756671][ T5] usb 2-1: config 0 has no interface number 0 [ 304.948195][ T5] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 304.957413][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.966486][ T5] usb 2-1: Product: ꢞ捘 [ 304.971214][ T5] usb 2-1: SerialNumber: Л [ 304.977427][ T5] usb 2-1: config 0 descriptor?? [ 305.253139][ T5] orinoco_usb: Didn't find the required bulk endpoints [ 305.260029][ T5] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 305.270402][ T5] usb 2-1: USB disconnect, device number 30 04:18:56 executing program 1: syz_usb_connect(0x0, 0x3b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0x8, 0x2e, 0xd1, 0x1f, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:56 executing program 0: 04:18:56 executing program 2: 04:18:56 executing program 4: 04:18:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:56 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x808400, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) 04:18:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:56 executing program 2: 04:18:56 executing program 0: 04:18:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0}, 0x0) 04:18:56 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x808400, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) 04:18:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 306.177895][ T5] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 306.405522][ T5] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 306.413889][ T5] usb 2-1: config 0 has no interface number 0 [ 306.576998][ T5] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 306.597869][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.607509][ T5] usb 2-1: Product: ꢞ捘 [ 306.612195][ T5] usb 2-1: SerialNumber: Л [ 306.619958][ T5] usb 2-1: config 0 descriptor?? [ 306.903023][ T5] orinoco_usb: Didn't find the required bulk endpoints [ 306.909932][ T5] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 306.920590][ T5] usb 2-1: USB disconnect, device number 31 04:18:58 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1e, 0x8, 0x0, 0xff, 0x95}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x3, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d4fe29409517dcef5c810d10f0993425"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "82ee9ea85863b0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0xe6, &(0x7f0000000580)=@string={0xe6, 0x3, "c5b6f0b4259857b1f620fb945a55a73b4813e75bf334c8b68b93fab0b0f3d703b68f308b464e3f2d8cc82886642374538a23a134a0bb81737f8c235eb5629e7a7124f7b94e8e2ca3fe61b713ad8d55f25daf3def5c099c13a98b0c2bae93ae82e584975adffde7c5eebd75159bc5b9ce964d2f6e5722f03e1cd89cda8b6e72ebf94267446d485c409c25b61317a94f77d3796301e68fa94dd1431efb6e24f62075e45b960b7f68db88b8006189b03460acd089d18acf929c7f39373b76f4bd28880336a576ff4211df62495026b6802489154b15c0c2efbc7d3cbe614231d01982fb51d1"}}, {0x0, 0x0}, {0xd9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x0, 0x0}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:18:58 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) semop(0x0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 04:18:58 executing program 2: getrandom(&(0x7f0000000080)=""/44, 0xf8dce77545f3ac9f, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = dup(r0) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000) 04:18:58 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x808400, 0x0) socket$inet(0x2, 0x0, 0x8) chdir(&(0x7f00000000c0)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x6, {{0xa, 0x4e21, 0x0, @mcast2}}}, 0x90) fallocate(r0, 0x0, 0x0, 0x110001) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x0, 0x0, 0x38, 0x4, 0x5}, @llc={@llc={0xd4, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b45c363da88553fc07af27fd5fe03bb1b8551411a58d56ce269528bce31f94d9801a599034e45b88795c6240c8ba0b8d507542ff29427e7254a80"}}}, 0x65) 04:18:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) pipe(0x0) socket$inet6(0xa, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 04:18:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:18:58 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300023a0967f207d598a5b45874729900e98552da92b996429b24c422cabd238c886de715c4c6e1a7f4d5cb1318ba50bcf18c3b87d91face8dacc7c865f4e4d3e77f3ecfbb5080c5a52260c5a715c25beaef6b300"/95], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 307.687277][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:18:58 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x808400, 0x0) socket$inet(0x2, 0x0, 0x8) chdir(&(0x7f00000000c0)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x6, {{0xa, 0x4e21, 0x0, @mcast2}}}, 0x90) fallocate(r0, 0x0, 0x0, 0x110001) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x0, 0x0, 0x38, 0x4, 0x5}, @llc={@llc={0xd4, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b45c363da88553fc07af27fd5fe03bb1b8551411a58d56ce269528bce31f94d9801a599034e45b88795c6240c8ba0b8d507542ff29427e7254a80"}}}, 0x65) [ 307.792654][ T9782] usb 2-1: new high-speed USB device number 32 using dummy_hcd 04:18:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 307.835801][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.869806][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:18:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb0000000000000000004800"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 308.033070][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 308.052732][ T9782] usb 2-1: config 0 has no interface number 0 04:18:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14}}], 0x18}, 0x0) [ 308.262915][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 308.285097][T12402] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.288811][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.311320][T12408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.347156][ T9782] usb 2-1: Product: ꢞ捘 [ 308.367714][ T9782] usb 2-1: SerialNumber: Л [ 308.401961][ T9782] usb 2-1: config 0 descriptor?? [ 308.713060][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 308.722227][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 308.757844][ T9782] usb 2-1: USB disconnect, device number 32 04:19:00 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:19:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) msgget(0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/4096}, 0x1008, 0x8000000000000000, 0x1000) 04:19:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb0000000000000000004800"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) pipe(0x0) socket$inet6(0xa, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 04:19:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 309.280958][T12440] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 04:19:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) msgget(0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/4096}, 0x1008, 0x8000000000000000, 0x1000) 04:19:00 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb0000000000000000004800"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:00 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x51) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES32=r2], 0x191) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 04:19:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) msgget(0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/4096}, 0x1008, 0x8000000000000000, 0x1000) [ 309.559705][T12449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.635616][ T4143] usb 2-1: new high-speed USB device number 33 using dummy_hcd 04:19:00 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 309.688443][T12449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.707596][T12449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:19:00 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xf8dce77545f3ac9f, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = dup(r0) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r2 = dup(0xffffffffffffffff) ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x404c8d5) [ 309.854184][ T4143] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 309.862332][ T4143] usb 2-1: config 0 has no interface number 0 [ 310.064020][ T4143] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 310.085748][ T4143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.128757][ T4143] usb 2-1: Product: syz [ 310.149530][ T4143] usb 2-1: Manufacturer: syz [ 310.155682][T12449] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 310.171546][ T4143] usb 2-1: SerialNumber: syz [ 310.179256][ T4143] usb 2-1: config 0 descriptor?? 04:19:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000100)=0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000042, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='#', 0x1, 0x20042041, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) [ 310.192633][T12457] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.208329][T12449] syz-executor.5 (12449) used greatest stack depth: 10104 bytes left [ 310.462879][ T4143] orinoco_usb: Didn't find the required bulk endpoints [ 310.469913][ T4143] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 310.489382][ T4143] usb 2-1: USB disconnect, device number 33 04:19:02 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:19:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}}, 0x0) 04:19:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{}, "cf81d922e6e62700", "245ed452a43a4a91140e50438bf412c873891e85e60d85358ae77989967b0624", "b8af4b39", "068e9204cc752643"}, 0x38) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:19:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 04:19:02 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 311.136752][T12506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.173632][T12506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.240738][T12509] kvm: emulating exchange as write [ 311.252307][T12506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.266416][T12506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:19:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{}, "cf81d922e6e62700", "245ed452a43a4a91140e50438bf412c873891e85e60d85358ae77989967b0624", "b8af4b39", "068e9204cc752643"}, 0x38) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 311.329273][T12508] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:19:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x6, {{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}]}, 0x110) fallocate(r0, 0x0, 0x0, 0x110001) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x3, 0x0, 0x38, 0x4, 0x5}, @llc={@llc={0xd4, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b45c363da88553fc07af27fd5fe03bb1b8551411a58d56ce269528bce31f94d9801a599034e45b88795c6240c8ba0b8d507542ff29427e7254a804392490f5fa60669d6eb4f4ce7f42affb6d16b68e9688328ade04c"}}}, 0x80) 04:19:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 311.413853][ T5] usb 2-1: new high-speed USB device number 34 using dummy_hcd 04:19:02 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 311.599369][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:19:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x6, {{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}]}, 0x110) fallocate(r0, 0x0, 0x0, 0x110001) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x3, 0x0, 0x38, 0x4, 0x5}, @llc={@llc={0xd4, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b45c363da88553fc07af27fd5fe03bb1b8551411a58d56ce269528bce31f94d9801a599034e45b88795c6240c8ba0b8d507542ff29427e7254a804392490f5fa60669d6eb4f4ce7f42affb6d16b68e9688328ade04c"}}}, 0x80) [ 311.653470][ T5] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 311.661612][ T5] usb 2-1: config 0 has no interface number 0 [ 311.727555][T12537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.826545][T12537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.856170][T12537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.892977][ T5] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 311.906560][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.925850][ T5] usb 2-1: Product: syz [ 311.935582][ T5] usb 2-1: Manufacturer: syz [ 311.940629][ T5] usb 2-1: SerialNumber: syz [ 311.955892][ T5] usb 2-1: config 0 descriptor?? [ 312.002201][T12544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.024189][T12544] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 312.272776][ T5] orinoco_usb: Didn't find the required bulk endpoints [ 312.284413][ T5] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 312.306951][ T5] usb 2-1: USB disconnect, device number 34 04:19:03 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:19:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:03 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x6, {{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}]}, 0x110) fallocate(r0, 0x0, 0x0, 0x110001) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x3, 0x0, 0x38, 0x4, 0x5}, @llc={@llc={0xd4, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b45c363da88553fc07af27fd5fe03bb1b8551411a58d56ce269528bce31f94d9801a599034e45b88795c6240c8ba0b8d507542ff29427e7254a804392490f5fa60669d6eb4f4ce7f42affb6d16b68e9688328ade04c"}}}, 0x80) 04:19:03 executing program 0: r0 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000000c0), 0x0}, 0x20) 04:19:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 04:19:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 312.818042][T12561] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.832219][T12563] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 04:19:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 312.900316][T12565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:19:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 312.947324][T12565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.974031][T12565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:19:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x6, {{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}]}, 0x110) fallocate(r0, 0x0, 0x0, 0x110001) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x3, 0x0, 0x38, 0x4, 0x5}, @llc={@llc={0xd4, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b45c363da88553fc07af27fd5fe03bb1b8551411a58d56ce269528bce31f94d9801a599034e45b88795c6240c8ba0b8d507542ff29427e7254a804392490f5fa60669d6eb4f4ce7f42affb6d16b68e9688328ade04c"}}}, 0x80) [ 313.081472][T12573] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:19:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:04 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000003ff) [ 313.192452][ T9782] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 313.276997][T12586] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.415431][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 313.431304][ T9782] usb 2-1: config 0 has no interface number 0 [ 313.622454][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 313.631549][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.652350][ T9782] usb 2-1: Product: syz [ 313.656541][ T9782] usb 2-1: Manufacturer: syz [ 313.661247][ T9782] usb 2-1: SerialNumber: syz [ 313.683267][ T9782] usb 2-1: config 0 descriptor?? [ 313.962818][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 313.969866][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 313.980869][ T9782] usb 2-1: USB disconnect, device number 35 04:19:05 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:19:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, [0x0, 0x101, 0x157]}) 04:19:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) tkill(0x0, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:05 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) writev(r0, &(0x7f00000023c0), 0x10000000000003ff) 04:19:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 04:19:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) tkill(0x0, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 314.507190][T12615] BPF:hdr_len not found [ 314.510150][T12614] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:19:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x7000000, 0x0, 0x258, 0xc403, 0x3b8, 0x210, 0x210, 0x3b8, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x2000, 'hashlimit\x00'}, {'veth0_macvtap\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 04:19:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x108, 0x0, 0x0, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00', {}, {}, 0x88}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@udplite={{0x30, 'udplite\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x0, 0x8}}}}}, 0x0) 04:19:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x4000000000dc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 314.679748][T12637] BPF:hdr_len not found [ 314.708032][T12644] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.732980][T12641] xt_CT: No such helper "netbios-ns" [ 314.755114][T12641] xt_CT: No such helper "netbios-ns" 04:19:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) tkill(0x0, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 314.832314][ T9782] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 314.929199][T12652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.960560][T12659] BPF:hdr_len not found [ 314.985683][T12652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.996879][T12652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.094087][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 315.112028][ T9782] usb 2-1: config 0 has no interface number 0 [ 315.332608][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 315.341679][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.362273][ T9782] usb 2-1: Product: syz [ 315.366466][ T9782] usb 2-1: Manufacturer: syz [ 315.371080][ T9782] usb 2-1: SerialNumber: syz [ 315.393439][ T9782] usb 2-1: config 0 descriptor?? [ 315.682705][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 315.689743][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 315.712905][ T9782] usb 2-1: USB disconnect, device number 36 04:19:07 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:19:07 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300023a0967f207"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:19:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:07 executing program 4: socket(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) tkill(0x0, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x4000000000dc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 316.238522][T12692] BPF:hdr_len not found 04:19:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980700009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000008800000000000002726f7365300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000fb000000000000ecff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000100000000000000000000000000000000ee00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000500000000000400000000000000000000000000000070009000000000000000000000000000000000000000010020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 316.265734][T12701] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:19:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) tkill(0x0, 0x9) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:07 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 316.361269][T12707] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 316.427944][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.483093][ T9782] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 316.502576][T12713] BPF:hdr_len not found [ 316.508224][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.536960][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:19:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) tkill(0x0, 0x9) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 316.680013][T12719] BPF:hdr_len not found [ 316.694388][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 316.706134][ T9782] usb 2-1: config 0 has no interface number 0 04:19:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) tkill(0x0, 0x9) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 316.882487][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 316.897718][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 04:19:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x7000000, 0x0, 0x258, 0xc403, 0x3b8, 0x210, 0x210, 0x3b8, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'veth0_macvtap\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x401, 0x0, 0x0, 0x9c}}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) [ 316.922938][T12712] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.943037][T12729] BPF:hdr_len not found [ 316.961732][ T9782] usb 2-1: Product: syz [ 316.997253][ T9782] usb 2-1: Manufacturer: syz [ 317.021185][ T9782] usb 2-1: SerialNumber: syz [ 317.050794][ T9782] usb 2-1: config 0 descriptor?? [ 317.354894][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 317.361920][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 317.403365][ T9782] usb 2-1: USB disconnect, device number 37 04:19:08 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 04:19:09 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300023a0967f207"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:19:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e66"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r0, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c04b16bf4fae3636eac606b33"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a22b88917"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5dd47b95003b9d356b"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000004680)=[{&(0x7f0000001480)="94", 0xfec6}], 0x1) fallocate(r0, 0x0, 0x0, 0x810fffb) sync_file_range(r0, 0x0, 0x0, 0x7) [ 318.159655][T12767] BPF:hdr_len not found 04:19:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 318.208785][T12771] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.233934][ T27] audit: type=1800 audit(1592453949.277:11): pid=12764 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="cpuacct.usage_all" dev="sda1" ino=16252 res=0 04:19:09 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300023a0967f207"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 318.262154][T10179] usb 2-1: new high-speed USB device number 38 using dummy_hcd 04:19:09 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300023a0967f207"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:19:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e66"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 318.369561][T12783] BPF:hdr_len not found 04:19:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e66"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 318.451757][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.484713][T12797] BPF:hdr_len not found [ 318.535072][T10179] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 318.549829][T10179] usb 2-1: config 0 has no interface number 0 [ 318.609883][T12802] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.822444][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 318.831562][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.852485][T10179] usb 2-1: Product: syz [ 318.856679][T10179] usb 2-1: Manufacturer: syz [ 318.861276][T10179] usb 2-1: SerialNumber: syz [ 318.874558][T10179] usb 2-1: config 0 descriptor?? [ 319.172716][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 319.182471][T10179] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 319.235286][T10179] usb 2-1: USB disconnect, device number 38 04:19:10 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 320.054247][ T9782] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 320.274593][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 320.294461][ T9782] usb 2-1: config 0 has no interface number 0 [ 320.454517][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 320.474452][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.501993][ T9782] usb 2-1: Product: syz [ 320.506219][ T9782] usb 2-1: Manufacturer: syz [ 320.510816][ T9782] usb 2-1: SerialNumber: syz [ 320.547917][ T9782] usb 2-1: config 0 descriptor?? [ 320.862419][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 320.869390][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 320.923839][ T9782] usb 2-1: USB disconnect, device number 39 04:19:12 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300023a0967f207"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:19:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:12 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:19:12 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xf8dce77545f3ac9f, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = dup(r0) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000240)={0x0, 0x6, 0x8b, 0x4}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x404c8d5) 04:19:12 executing program 4: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x7000000, 0x0, 0x258, 0xc403, 0x3b8, 0x210, 0x210, 0x3b8, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'veth0_macvtap\x00', {0x4000000000000, 0x1774, 0x0, 0x0, 0x0, 0x2, 0x401}}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 04:19:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 321.745589][T12842] xt_hashlimit: overflow, try lower: 1125899906842624/6004 [ 321.775935][T12850] BPF:hdr_len not found 04:19:12 executing program 4: r0 = timerfd_create(0x0, 0x80800) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) 04:19:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:13 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x0, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004000000", 0x58}], 0x1) [ 322.020502][T12867] BPF:hdr_len not found 04:19:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/219, 0x0, 0xdb, 0x8}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 322.051962][ T12] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 322.191732][T12879] BPF:hdr_len not found [ 322.322185][ T12] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 322.330294][ T12] usb 2-1: config 0 has no interface number 0 [ 322.542253][ T12] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 322.554806][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.571724][ T12] usb 2-1: Product: syz [ 322.581597][ T12] usb 2-1: Manufacturer: syz [ 322.590818][ T12] usb 2-1: SerialNumber: syz [ 322.603378][ T12] usb 2-1: config 0 descriptor?? [ 322.892540][ T12] orinoco_usb: Didn't find the required bulk endpoints [ 322.904209][ T12] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 322.950889][ T12] usb 2-1: USB disconnect, device number 40 04:19:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/4096}, 0x1008, 0x8000000000000000, 0x1000) 04:19:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 04:19:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:14 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:19:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:14 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xf8dce77545f3ac9f, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = dup(r0) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000240)={0x0, 0x6, 0x8b, 0x4}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x404c8d5) 04:19:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x80) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, 0x0}, 0x0) tkill(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 04:19:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x80) getdents64(0xffffffffffffffff, &(0x7f0000002700)=""/4104, 0x1008) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10800000}, 0xc, 0x0}, 0x0) tkill(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:14 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 04:19:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:14 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x143042, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x0, 0x0, 0x12000) [ 323.727352][ T5] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 323.974547][ T5] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 323.986106][ T5] usb 2-1: config 0 has no interface number 0 [ 324.194550][ T5] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 324.207012][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.226577][ T5] usb 2-1: Product: syz [ 324.239446][ T5] usb 2-1: Manufacturer: syz [ 324.249694][ T5] usb 2-1: SerialNumber: syz [ 324.262815][ T5] usb 2-1: config 0 descriptor?? [ 324.552295][ T5] orinoco_usb: Didn't find the required bulk endpoints [ 324.559189][ T5] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 324.582522][ T5] usb 2-1: USB disconnect, device number 41 04:19:16 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 04:19:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:16 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000500)="8d", 0x1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r2, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r2, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}}], 0x300, 0x43, 0x0) 04:19:16 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xf8dce77545f3ac9f, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = dup(r0) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000) 04:19:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 04:19:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:19:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:16 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 04:19:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 325.451753][ T9782] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 325.724750][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 325.736367][ T9782] usb 2-1: config 0 has no interface number 0 [ 325.902024][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 325.914008][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.931964][ T9782] usb 2-1: Product: syz [ 325.936243][ T9782] usb 2-1: Manufacturer: syz [ 325.940840][ T9782] usb 2-1: SerialNumber: syz [ 325.965499][ T9782] usb 2-1: config 0 descriptor?? [ 326.252017][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 326.258987][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 326.274716][ T9782] usb 2-1: USB disconnect, device number 42 04:19:17 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 04:19:17 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 04:19:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:17 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xf8dce77545f3ac9f, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = dup(r0) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000) 04:19:17 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000500)="8d", 0x1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r2, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r2, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}}], 0x300, 0x43, 0x0) 04:19:17 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x808400, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) open(0x0, 0x141042, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x3, 0x0, 0x38, 0x4}, @llc={@llc={0x0, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b"}}}, 0x2b) 04:19:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:18 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000048000034000100300001000b0001006374696e666f"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 04:19:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:18 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x808400, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) open(0x0, 0x141042, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x1a}, @val={0x2, 0x3, 0x0, 0x38, 0x4}, @llc={@llc={0x0, 0x7e, "ad", "ef7fd57a36fd8c7005be48480b15c40436948db2fa3a76b1c45b"}}}, 0x2b) 04:19:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8004551a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x4c}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:19:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 327.141685][ T9955] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 327.351925][ T9955] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 327.363304][ T9955] usb 2-1: config 0 has no interface number 0 [ 327.531990][ T9955] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 327.545613][ T9955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.562653][ T9955] usb 2-1: Product: syz [ 327.571482][ T9955] usb 2-1: Manufacturer: syz [ 327.582595][ T9955] usb 2-1: SerialNumber: syz [ 327.594848][ T9955] usb 2-1: config 0 descriptor?? [ 327.882017][ T9955] orinoco_usb: Didn't find the required bulk endpoints [ 327.888905][ T9955] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 327.899541][ T9955] usb 2-1: USB disconnect, device number 43 04:19:19 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 04:19:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x4c}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:19:19 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xf8dce77545f3ac9f, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = dup(r0) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000) 04:19:19 executing program 4: syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x668}}]}}}]}}]}}, 0x0) 04:19:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e40000000100000000000000000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000002000000000c001080200000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000004001b0002726f7365300000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ed2ffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000457000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) write$tun(r0, &(0x7f00000002c0)={@void, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "68ea8cbde246674c545488ae0cd25cd0"}, @exp_fastopen={0xfe, 0xd, 0xf989, "589837238856452a6d"}, @generic={0x0, 0xf, "03bd1e014b68850edf7d38a7bc"}, @mss={0x2, 0x4}, @eol, @nop, @generic={0x0, 0xb, "5ee54af6c7208d9cd2"}]}}}}}}, 0xfdef) 04:19:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 328.469243][T13110] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 328.470516][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.536883][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:19:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 328.612220][T13099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 04:19:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x120, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000900)={@private0, 0x10000000, 0x1, 0x3}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 328.711676][ T9782] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 328.741612][T10179] usb 2-1: new high-speed USB device number 44 using dummy_hcd 04:19:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 328.876161][T13123] fuse: Bad value for 'fd' [ 328.958246][T13128] fuse: Bad value for 'fd' [ 328.971854][T10179] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 328.989186][T10179] usb 2-1: config 0 has no interface number 0 04:19:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:20 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 329.082442][ T9782] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 329.099315][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.181584][T13099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.197399][T10179] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 329.219749][T10179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.244357][T10179] usb 2-1: Product: syz [ 329.263833][T10179] usb 2-1: Manufacturer: syz [ 329.275488][ T9782] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.278433][T10179] usb 2-1: SerialNumber: syz [ 329.294900][ T9782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.305340][T10179] usb 2-1: config 0 descriptor?? [ 329.334962][ T9782] usb 5-1: Product: syz [ 329.353966][ T9782] usb 5-1: Manufacturer: syz [ 329.367532][ T9782] usb 5-1: SerialNumber: syz [ 329.403841][T13102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 329.422444][ T9782] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 329.591923][T10179] orinoco_usb: Didn't find the required bulk endpoints [ 329.598886][T10179] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 329.622274][T10179] usb 2-1: USB disconnect, device number 44 [ 329.636264][ T3685] usb 5-1: USB disconnect, device number 2 04:19:21 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x79, 0x76, 0xcf, 0x40, 0xd4e, 0x1000, 0x7ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0x8, 0x2e, 0xd1, 0x1f}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 04:19:21 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f00000029c0)=""/70, 0x46}, {0x0}], 0x3}}], 0x2, 0x120, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000900)={@private0, 0x10000000, 0x1, 0x3, 0x1, 0x3, 0x9}, &(0x7f0000000940)=0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4b200100, &(0x7f0000000400)="4e558d1f064f544caccdcdec6094a6bde05fba201fdd2b2962925d02f7b872ee7bb35732c01f", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="390afaab88e5d073bf4e584436f7b3eb254ea27d9c66df71c7155a105395251f4b4d6971223601616121806f777dd5f47715e70f0759224b1125382453a6e862ecc1f4e8c32c0b183cfa54f51fe10f079cae989dce") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 04:19:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 330.192707][T13183] IPVS: ftp: loaded support on port[0] = 21 [ 330.393710][ T9782] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 330.481498][ T3685] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 330.591493][ T311] tipc: TX() has been purged, node left! [ 330.602300][ T9782] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 330.610441][ T9782] usb 2-1: config 0 has no interface number 0 [ 330.781746][ T9782] usb 2-1: New USB device found, idVendor=0d4e, idProduct=1000, bcdDevice=7e.f7 [ 330.790798][ T9782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.800940][ T9782] usb 2-1: Product: syz [ 330.805225][ T9782] usb 2-1: Manufacturer: syz [ 330.809844][ T9782] usb 2-1: SerialNumber: syz [ 330.818220][ T9782] usb 2-1: config 0 descriptor?? [ 330.861510][ T3685] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 331.003531][ T0] NOHZ: local_softirq_pending 08 [ 331.031542][ T3685] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.040713][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.048740][ T3685] usb 5-1: Product: syz [ 331.053105][ T3685] usb 5-1: Manufacturer: syz [ 331.057767][ T3685] usb 5-1: SerialNumber: syz [ 331.085746][T13102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 331.101790][ T9782] orinoco_usb: Didn't find the required bulk endpoints [ 331.102315][ T3685] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 331.108659][ T9782] orinoco_usb: probe of 2-1:0.19 failed with error -14 [ 331.131042][ T9782] usb 2-1: USB disconnect, device number 45 04:19:22 executing program 4: unshare(0x20000400) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x668}}]}}}]}}]}}, 0x0) 04:19:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:19:22 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f00000029c0)=""/70, 0x46}, {0x0}], 0x3}}], 0x2, 0x120, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000900)={@private0, 0x10000000, 0x1, 0x3, 0x1, 0x3, 0x9}, &(0x7f0000000940)=0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4b200100, &(0x7f0000000400)="4e558d1f064f544caccdcdec6094a6bde05fba201fdd2b2962925d02f7b872ee7bb35732c01f", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="390afaab88e5d073bf4e584436f7b3eb254ea27d9c66df71c7155a105395251f4b4d6971223601616121806f777dd5f47715e70f0759224b1125382453a6e862ecc1f4e8c32c0b183cfa54f51fe10f079cae989dce") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 331.331558][ T4143] usb 5-1: USB disconnect, device number 3 [ 331.529951][T13248] IPVS: ftp: loaded support on port[0] = 21 04:19:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:22 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 04:19:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f00000029c0)=""/70, 0x46}, {0x0}], 0x3}}], 0x2, 0x120, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000900)={@private0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x9}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4b200100, &(0x7f0000000400)="4e558d1f064f544caccdcdec6094a6bde05fba201fdd2b2962", 0x0, &(0x7f0000000480), &(0x7f00000004c0)='9') mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 04:19:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x123) 04:19:23 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 331.933685][ T4143] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 331.999316][T13296] IPVS: ftp: loaded support on port[0] = 21 04:19:23 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) [ 332.197347][T13298] IPVS: ftp: loaded support on port[0] = 21 [ 332.332065][ T4143] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 332.541462][ T4143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.550518][ T4143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.571399][ T4143] usb 5-1: Product: syz [ 332.575590][ T4143] usb 5-1: Manufacturer: syz [ 332.580182][ T4143] usb 5-1: SerialNumber: syz [ 332.623276][T13245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 332.652418][ T4143] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 332.791384][ T311] tipc: TX() has been purged, node left! [ 332.974123][ T311] tipc: TX() has been purged, node left! [ 333.151430][ T311] tipc: TX() has been purged, node left! 04:19:24 executing program 4: unshare(0x20000400) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x668}}]}}}]}}]}}, 0x0) 04:19:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffbfffc}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000038c0)=""/4117, 0x1015}, {0x0}], 0x2, &(0x7f00000000c0)=""/9, 0x9}, 0x3a12}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=""/35, 0x23}, 0xf110}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x2}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x20100, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 04:19:24 executing program 3: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:24 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 04:19:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f00000029c0)=""/70, 0x46}, {0x0}], 0x3}}], 0x2, 0x120, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000900)={@private0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x9}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4b200100, &(0x7f0000000400)="4e558d1f064f544caccdcdec6094a6bde05fba201fdd2b2962", 0x0, &(0x7f0000000480), &(0x7f00000004c0)='9') mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 333.375130][T10179] usb 5-1: USB disconnect, device number 4 04:19:24 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 04:19:24 executing program 3: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 333.537276][T13385] IPVS: ftp: loaded support on port[0] = 21 [ 333.590262][T13390] FAT-fs (loop1): bogus number of reserved sectors [ 333.596961][T13390] FAT-fs (loop1): Can't find a valid FAT filesystem [ 333.666080][ T27] audit: type=1804 audit(1592453964.708:12): pid=13403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir391847047/syzkaller.5lPfw5/71/bus" dev="sda1" ino=16325 res=1 04:19:24 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 04:19:24 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 04:19:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:25 executing program 3: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 333.944784][ T27] audit: type=1804 audit(1592453964.758:13): pid=13405 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir391847047/syzkaller.5lPfw5/71/bus" dev="sda1" ino=16325 res=1 [ 334.601314][T10179] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 334.961304][T10179] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 335.141278][T10179] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.173641][T10179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.211257][T10179] usb 5-1: Product: syz [ 335.215543][T10179] usb 5-1: Manufacturer: syz [ 335.220136][T10179] usb 5-1: SerialNumber: syz [ 335.293648][T13422] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 335.324369][T10179] cdc_ether: probe of 5-1:1.0 failed with error -22 04:19:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f00000029c0)=""/70, 0x46}, {0x0}], 0x3}}], 0x2, 0x120, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000900)={@private0, 0x10000000, 0x1, 0x3, 0x1, 0x3, 0x9}, &(0x7f0000000940)=0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4b200100, &(0x7f0000000400)="4e558d1f064f544caccdcdec6094a6bde05fba201fdd2b2962925d02f7b872ee7bb35732c01f", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="390afaab88e5d073bf4e584436f7b3eb254ea27d9c66df71c7155a105395251f4b4d6971223601616121806f777dd5f47715e70f0759224b1125382453a6e862ecc1f4e8c32c0b183cfa54f51fe10f079cae989dce") r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 04:19:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:27 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x0, 0x8}}}}}, 0x0) 04:19:27 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffbfffc}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000038c0)=""/4117, 0x1015}, {0x0}], 0x2, &(0x7f00000000c0)=""/9, 0x9}, 0x3a12}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=""/35, 0x23}, 0xf110}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x2}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x20100, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 04:19:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000003540)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)="581f", 0x2}], 0x1}}, {{&(0x7f00000013c0)=@ax25={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}}], 0x2, 0x0) [ 336.031449][ T311] tipc: TX() has been purged, node left! [ 336.064705][T10179] usb 5-1: USB disconnect, device number 5 04:19:27 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x0, 0x8}}}}}, 0x0) 04:19:27 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0xb2e}], 0x1, 0x120, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14}, 0x14}, 0x1, 0xf618000000000000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000003c0)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 336.184154][T13469] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 04:19:27 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 336.253909][T13474] FAT-fs (loop1): bogus number of reserved sectors [ 336.260578][T13474] FAT-fs (loop1): Can't find a valid FAT filesystem [ 336.297358][T13477] IPVS: ftp: loaded support on port[0] = 21 [ 336.447649][ T27] audit: type=1804 audit(1592453967.398:14): pid=13474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir391847047/syzkaller.5lPfw5/72/bus" dev="sda1" ino=16346 res=1 04:19:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}}, {{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f00000029c0)=""/70, 0x46}, {0x0}], 0x3}}], 0x2, 0x120, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000900)={@private0, 0x10000000, 0x1, 0x3, 0x1, 0x3, 0x9}, &(0x7f0000000940)=0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4b200100, &(0x7f0000000400)="4e558d1f064f544caccdcdec6094a6bde05fba201fdd2b2962925d02f7b872ee7bb35732c01f", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="390afaab88e5d073bf4e584436f7b3eb254ea27d9c66df71c7155a105395251f4b4d6971223601616121806f777dd5f47715e70f0759224b1125382453a6e862ecc1f4e8c32c0b183cfa54f51fe10f079cae989dce") r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340), &(0x7f00000003c0)=0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 04:19:27 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast=0xe0000001}, {0x0, 0x0, 0x8}}}}}, 0x0) 04:19:27 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) [ 336.557595][ T27] audit: type=1804 audit(1592453967.448:15): pid=13483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir391847047/syzkaller.5lPfw5/72/bus" dev="sda1" ino=16346 res=1 04:19:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0xb2e}], 0x1, 0x120, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14}, 0x14}, 0x1, 0xf618000000000000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000003c0)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4c000000, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 04:19:27 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e40000000100000000000000000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000002000000000c001080200000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000004001b0002726f7365300000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ed2ffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000457000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "68ea8cbde246674c545488ae0cd25cd0"}, @exp_fastopen={0xfe, 0xd, 0xf989, "589837238856452a6d"}, @generic={0x0, 0xf, "03bd1e014b68850edf7d38a7bc"}, @mss={0x2, 0x4}, @eol, @nop, @generic={0x0, 0xb, "5ee54af6c7208d9cd2"}]}}}}}}, 0xfdef) [ 336.815228][T13530] IPVS: ftp: loaded support on port[0] = 21 04:19:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 04:19:28 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 337.028577][T13557] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 04:19:28 executing program 5: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='$\xbbeth0nodev*\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0xd0000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') [ 337.095039][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.154106][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:19:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) [ 337.253701][T13548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 04:19:28 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = epoll_create1(0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(0x0) 04:19:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) close(r0) 04:19:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="9dd256e761925be4ad0b7e631c8aec473f328df50b5dae54955b50c45d797dc5156044090b688b315b1f0118c3520101ea1758b51ecc834ece18cac8890a68c7556f8fdd15702eb7e898c44bcea0fad55fe48abdde7e746fd3bcf836cd0116788c35e297dcb0685b86", 0x69}], 0x1}}], 0x1, 0x0) [ 337.677832][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.792794][T13548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 04:19:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e40000000100000000000000000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000002000000000c001080200000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000004001b0002726f7365300000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ed2ffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000457000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "68ea8cbde246674c545488ae0cd25cd0"}, @exp_fastopen={0xfe, 0xd, 0xf989, "589837238856452a6d"}, @generic={0x0, 0xf, "03bd1e014b68850edf7d38a7bc"}, @mss={0x2, 0x4}, @eol, @nop, @generic={0x0, 0xb, "5ee54af6c7208d9cd2"}]}}}}}}, 0xfdef) 04:19:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 04:19:29 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/210, 0x200006d2}], 0x1, 0x820) 04:19:29 executing program 1: getpgrp(0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4a) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, &(0x7f0000000240)='\x91\xf7\xa9\xd1U\x8a\xdc\xc2\f\x19/#\xbd\x9fb}\xaa\xa1! \f\x02\x17\xa6`70\x13\xda\v\x87\xcea\bG\xba*\x1e\xdc5pyL*5\xfb\x04\f\xd5%\xc0f\x06\x05\xbc|\x03=\xa9TDKg_\xb8g\xad\xff\x06\x82\x86\xbbB\xeaw\xbc\x87\x94T#Uk8J\xe8\x8d\xfc\xc7h\x81yC\x93SFJ\xcf^N\xa0\x93\xfdZ\xd9\xa3e\xed\xf0\x8d\xf5i\x98\xea[\xe3\x9b\xb5\x94\xc6\x03\x00\x00\x00\x00\x00\x00\x00p\x94\xb3h\x10\xb6\x01\v\xe9Fr\xfc\x00`C\x7f\xe7n\xf0\xb8\xde\x02\xec8.\xe5\x01\x15)\x99\xcf\x02\x1fz_\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xe7\xae4/\xc1j\x1ey\xcc\xb0\xd9JP\x95l\x06vF\xe2\xcd\xd6\xad$\xde\xb3\xaeA\x1d\xe1 \xfc\x1c\xd5\x9e\x1e\xea\x8c*\xb1\x9e0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 04:19:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd4ce}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x8000, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0xfffffe81) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x0, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) lseek(r1, 0x0, 0x3) 04:19:33 executing program 0: ftruncate(0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000280)={{0x0, @local, 0x0, 0x0, 'wlc\x00', 0x1, 0x9, 0x25}, {@rand_addr=0x64010100, 0x4e22, 0x0, 0x4, 0x19b4, 0xffff}}, 0x44) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 04:19:33 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@uni_xlate='uni_xlate=1'}]}) 04:19:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 342.990097][ T27] audit: type=1804 audit(1592453974.029:16): pid=13829 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir553215140/syzkaller.4FurUt/152/file0/bus" dev="loop5" ino=24 res=1 [ 343.027659][T13838] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 343.112227][T13842] FAT-fs (loop2): bogus number of reserved sectors [ 343.119394][T13842] FAT-fs (loop2): Can't find a valid FAT filesystem [ 343.127708][T13838] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 343.180135][T13842] FAT-fs (loop2): bogus number of reserved sectors [ 343.194938][T13842] FAT-fs (loop2): Can't find a valid FAT filesystem 04:19:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd4ce}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x0, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x101}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) lseek(r0, 0x0, 0x3) [ 343.314324][ T27] audit: type=1800 audit(1592453974.359:17): pid=13835 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16363 res=0 04:19:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@dev, 0x0, r3}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000480)={@dev, r3}, 0x14) dup2(r0, r1) 04:19:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd4ce}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x8000, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0xfffffe81) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x0, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) lseek(r1, 0x0, 0x3) [ 343.601508][ T27] audit: type=1800 audit(1592453974.649:18): pid=13863 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16364 res=0 04:19:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd4ce}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x0, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x101}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) lseek(r0, 0x0, 0x3) [ 343.718544][ T27] audit: type=1804 audit(1592453974.759:19): pid=13839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir553215140/syzkaller.4FurUt/152/file0/bus" dev="loop5" ino=24 res=1 04:19:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd4ce}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x8000, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0xfffffe81) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x0, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) lseek(r1, 0x0, 0x3) [ 343.747508][ T27] audit: type=1804 audit(1592453974.759:20): pid=13839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir553215140/syzkaller.4FurUt/152/file0/bus" dev="loop5" ino=24 res=1 [ 343.805942][ T27] audit: type=1804 audit(1592453974.759:21): pid=13839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir553215140/syzkaller.4FurUt/152/file0/bus" dev="loop5" ino=24 res=1 04:19:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0xa494, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/68], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:36 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 04:19:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x8f3, @none, 0x3}, 0xe) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) unshare(0x6e020200) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x100000000000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x8, 0x18, "12e8218f30d4e847bd846762f77cd942b581901ba6bf23b932ebeac89e038269d89ec08ca10c4a846946103026b9488f3dc94ac3b19fa64f010b0f104d03d962", "2caba374bda30ce2fb3449ad89d0889c6361ae098735deb729acf8216bd23dc5", [0x7]}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@loopback}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@loopback}}, 0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000240)={@loopback, 0x40}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) 04:19:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r3, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 345.925167][T13906] IPVS: ftp: loaded support on port[0] = 21 [ 346.040111][ T27] audit: type=1804 audit(1592453977.079:22): pid=13913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir086616486/syzkaller.9Y1erU/196/bus" dev="sda1" ino=16364 res=1 04:19:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 346.421050][ T27] audit: type=1804 audit(1592453977.469:23): pid=13946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir086616486/syzkaller.9Y1erU/196/bus" dev="sda1" ino=16364 res=1 04:19:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r3, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 04:19:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0xa494, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/68], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0xa494, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/68], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0xa494, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/68], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 347.590933][ T21] tipc: TX() has been purged, node left! 04:19:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r3, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) ftruncate(r1, 0x208200) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x0, 0x0, 0x4) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 04:19:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x8f3, @none, 0x3}, 0xe) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) unshare(0x6e020200) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x100000000000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x100, 0x3, 0x8, 0x18, "12e8218f30d4e847bd846762f77cd942b581901ba6bf23b932ebeac89e038269d89ec08ca10c4a846946103026b9488f3dc94ac3b19fa64f010b0f104d03d962", "2caba374bda30ce2fb3449ad89d0889c6361ae098735deb729acf8216bd23dc5", [0x7]}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@loopback}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@loopback}}, 0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000240)={@loopback, 0x40}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) 04:19:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0xa494, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/68], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) read(r0, 0x0, 0x0) [ 348.714725][T14003] IPVS: ftp: loaded support on port[0] = 21 [ 349.185824][ T27] audit: type=1804 audit(1592453980.229:24): pid=14026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir553215140/syzkaller.4FurUt/155/bus" dev="sda1" ino=16382 res=1 04:19:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r3, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 349.317558][ T27] audit: type=1804 audit(1592453980.279:25): pid=14028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir553215140/syzkaller.4FurUt/155/bus" dev="sda1" ino=16382 res=1 04:19:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) ftruncate(r1, 0x208200) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r2, 0x0, 0x0, 0x4) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 04:19:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) [ 350.290500][ T27] audit: type=1804 audit(1592453981.329:26): pid=14074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir553215140/syzkaller.4FurUt/156/file0/bus" dev="loop5" ino=26 res=1 [ 350.360644][T14083] bridge0: port 1(bridge_slave_0) entered disabled state 04:19:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) sync() 04:19:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r3, r4, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:41 executing program 0: prctl$PR_SET_NAME(0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000100)=0x31, 0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init() syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xfe) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f0000000380)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200), 0xa198) 04:19:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0xa494, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/68], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 350.612132][ T27] audit: type=1326 audit(1592453981.659:27): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14092 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 [ 350.700445][ T21] tipc: TX() has been purged, node left! [ 351.405185][ T27] audit: type=1326 audit(1592453982.449:28): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14092 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:42 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000000080), 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f0000000080), 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:'}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0xe2000, &(0x7f00000002c0)='\xf5\xf2\x1bWt\tH\xb6\xe1\x85#\xd9\x1f\x93\x85\xbb\x9f\xa9\x01\x00\x00\x00\x00\x00\x00\x009\xd3^\xafZ\xb5\xbf\x99\xf0\x96\xb8\xc2R\xe4\xaf\xd8x#[\xeb\x91\x89\x11gl2\x8f\xb6\x85\xed]\b\x00\x8d-\xe7@I\xb8\xa9o\x8d\x973\x14\xfe\xebh\xbb\x02\x9c\x1f\xd1\'\xc9\x14\xbf]\xbdDF7j\xde\xe3f\x11\xee\x8f\xd3V\xaft\x1dO6@\xc6WG\xeb\x0e\xf0\xf9\xab\xc8q\xabx\xa9\x0fLZ\x1e\x03\xe3\xc2\xfa\xb9\xa2g2l8\x12\x87\xf0\xa3U\xc5\x05\x8e]G_\x95\xf3\x05\t\x8d\xcd\x96\xde\x81Q\xdaS\xb1d\xe4\x92\xe8\x97\xca\xf8P\xddb1\x84uC\xe0\x18') syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x4) splice(r2, 0x0, r4, 0x0, 0xfffffffb, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) fchownat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0xee00, 0x800) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000200)={0x1c, r6, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)={0x8d0, r6, 0x800, 0x74bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x23, 0xe, "735bb3b62e1a91b96bc866166fc2a63c1d32057c760caf64d1b84054fbc78d"}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x0, @link_local}, {0xa, 0x0, @random="57aca27750be"}, {0xa, 0x0, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x0, @local}, {0xa, 0x0, @remote}, {0xa, 0x0, @remote}, {0xa, 0x0, @broadcast}, {0xa, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x0, @local}, {0xa, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x0, @multicast}, {0xa}, {0xa, 0x0, @random="745fb254c65a"}]}, @NL80211_ATTR_BEACON_TAIL={0x7d1, 0xf, "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"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x14, 0x34, "ae1b2240203fe7632d7755b0ef54452d"}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x20000850}, 0x800) 04:19:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r3, r4, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x9}, 0x1c) sendmmsg$inet(r4, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 04:19:43 executing program 3: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xeffffffffffffffe, 0x2) getdents64(r0, 0x0, 0x0) 04:19:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) mlockall(0x1) [ 352.729552][ T27] audit: type=1326 audit(1592453983.769:29): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14142 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r3, r4, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x9}, 0x1c) sendmmsg$inet(r4, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 04:19:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 04:19:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 04:19:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_adjtime(0x7, 0x0) 04:19:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/163, 0xa3}, {0x0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/77, 0x4d}, {0x0}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x8, &(0x7f0000000c40)=""/202, 0xca}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb98e2", @ANYBLOB="0008000000000c90fcdbdf251100e10967f003b9007d2e7f"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/46, &(0x7f0000000500)=0x2e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2023c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000003c0)='./file0\x00', 0xc007e, 0x23) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) [ 353.529421][ T27] audit: type=1326 audit(1592453984.569:30): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14142 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 353.763665][ T27] audit: type=1326 audit(1592453984.789:31): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14196 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000200)='./control\x00') 04:19:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 354.020311][ T27] audit: type=1326 audit(1592453985.059:32): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14203 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 [ 354.540299][ T27] audit: type=1326 audit(1592453985.579:33): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14196 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 [ 354.818636][ T27] audit: type=1326 audit(1592453985.859:34): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14203 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/163, 0xa3}, {0x0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/77, 0x4d}, {0x0}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x8, &(0x7f0000000c40)=""/202, 0xca}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb98e2", @ANYBLOB="0008000000000c90fcdbdf251100e10967f003b9007d2e7f"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/46, &(0x7f0000000500)=0x2e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2023c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000003c0)='./file0\x00', 0xc007e, 0x23) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 04:19:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000200)='./control\x00') 04:19:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/163, 0xa3}, {0x0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/77, 0x4d}, {0x0}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x8, &(0x7f0000000c40)=""/202, 0xca}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb98e2", @ANYBLOB="0008000000000c90fcdbdf251100e10967f003b9007d2e7f"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/46, &(0x7f0000000500)=0x2e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2023c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000003c0)='./file0\x00', 0xc007e, 0x23) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) [ 356.189372][ T27] audit: type=1326 audit(1592453987.229:35): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14243 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/163, 0xa3}, {0x0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/77, 0x4d}, {0x0}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x8, &(0x7f0000000c40)=""/202, 0xca}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb98e2", @ANYBLOB="0008000000000c90fcdbdf251100e10967f003b9007d2e7f"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/46, &(0x7f0000000500)=0x2e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2023c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000003c0)='./file0\x00', 0xc007e, 0x23) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 04:19:48 executing program 0: clock_adjtime(0x0, &(0x7f00000000c0)={0x216, 0x0, 0x0, 0x0, 0x0, 0x9cb9, 0x6}) 04:19:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:48 executing program 3: socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:19:48 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xceff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40100, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mmap(&(0x7f0000372000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x6df7e000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) tkill(0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x0) getpid() getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x7}, 0x1, 0x0, 0x0, 0x4040900}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 04:19:48 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xceff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40100, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mmap(&(0x7f0000372000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x6df7e000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) tkill(0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x0) getpid() getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x7}, 0x1, 0x0, 0x0, 0x4040900}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 04:19:49 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xceff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40100, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mmap(&(0x7f0000372000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x6df7e000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) tkill(0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x0) getpid() getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x7}, 0x1, 0x0, 0x0, 0x4040900}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 04:19:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{&(0x7f00000003c0)=@can, 0x80, 0x0, 0x0, &(0x7f00000001c0)=""/120, 0x78}}, {{&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)}, {&(0x7f0000000100)=""/143, 0x8f}, {&(0x7f00000005c0)=""/190, 0xbe}, {0x0}], 0x4, &(0x7f0000000e40)=""/89, 0x59}}, {{&(0x7f0000000ec0)=@tipc=@id, 0x80, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000002280)=""/33, 0x21}], 0x3, &(0x7f0000002440)=""/79, 0x4f}, 0x2}, {{0x0, 0x0, &(0x7f0000004780)=[{0x0}, {0x0}, {&(0x7f0000003780)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f00000047c0)=""/21, 0x15}, 0x10000}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x8, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x803, 0xa0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f00000010c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3f) 04:19:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) mlockall(0x0) 04:19:50 executing program 0: io_submit(0x0, 0xdb4887b73ba6206d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x200a00}]) 04:19:50 executing program 0: io_submit(0x0, 0xdb4887b73ba6206d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x200a00}]) [ 359.234941][ T27] audit: type=1326 audit(1592453990.279:36): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14325 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:50 executing program 0: io_submit(0x0, 0xdb4887b73ba6206d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x200a00}]) 04:19:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 04:19:50 executing program 0: io_submit(0x0, 0xdb4887b73ba6206d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x200a00}]) 04:19:50 executing program 0: io_submit(0x0, 0x0, 0x0) 04:19:50 executing program 0: io_submit(0x0, 0x0, 0x0) [ 360.025015][ T27] audit: type=1326 audit(1592453991.069:37): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14325 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:53 executing program 0: io_submit(0x0, 0x0, 0x0) 04:19:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:53 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x488d00, 0x0) r0 = openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x74400, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x0, 0x0, &(0x7f0000000300)="58d7d7b0c3f4cea15552a1752ce070760bb5b890dd535c12069bf3ac399ef356f1c49217bed8c0f4bebe0fde75358d8360e01132c940c3354853904050b28013f8903e136eb7ef9b464f8b13893c3ef33c41e058bfef0f56b7263a15426a9a99f5277a4e14bf7181e6290533c51d81b9fe7a4ad306d9683f114fa9f7edcb884e03c5ec5e95bbfd65f8e7e9e5ffb00edea13bc69d04f111c8dd1d7427f13a93bb331b5af484523f7aa03c00d057b76ddd1b9166dd6d3a6013f3217bbfe5beac5cc2840dcf07830368fc7bfa6cad4419ac0e6671dc0ff7dc8294eb39cf4d7865627985200abded49c21b6da9231da4a970f017d45f958a9866d9cb1147f8845e325065239fab8ab06a21fb9be65d121fca0dd59e3450d1965b55a30cb50747aa6b87274471cff6d4e6cf1c8d092a65ea63909fae32b99717010b5dff8a5ebaa898f316aaffdb8cc00185ddc1caf6ebc1402a9508be82648c91eca9231efb9d33b070000b67021de6641f0afdfa4cfbef669ba7e5c10ffba71aec68eba770cbe616545f61e7b4ccdd1dce579fb04825b1269217e70adc8a419bc8d69bd7a1bedd11ae15dc2e55a1358657ccfbb7e55a8cff7cc6a0884841d81659cbe8a32124620188659c9b4376d2f417c3aae81333a6fdb3699d43cf2800d20d1a469f97cb5ea0b5f4df4927428dfbe4bff3b31ed07d856f0560e96aba73e124106a5552ba711914a651e8c897c2c9ab9de4551b210af37d2966483d8c811c5c2dab438658527efd96ec4a0091a7b17eb2fc4fab2ac749ab8c5a511bab7affd0741717c0e31c235ebc4842e40a3e5b6cbbf0854865f5d3fce7b2d6a3fa0e18d3d4d4941dc5ed1a180145cbb35005e1e38e1e50fe6c133e662891e8ba5f30ed0013b737984051e12a2dbea49ad0f065d8fc4661ddfe4e47f766912b28770125715e97f063c939aab7d02a55c2cb2687ea53e92514dfb21a528f6e9b1d64f7edac92e13e2280f48226f615b548b9c3be3f5efeaec1a2dd617bd338a375abb5e344c0ba97b49c82a9c3a0c732ffcd8ef8baf6ff464fa6aa00db7c91e43a390b6b1958e6e5edb18cb0a1caf9e53ba934131e24e1c10cbf978caa7b83be2229abb6ea275dc913c87dcd788bf96dcb40f57e98579a58889f0461e56f72fb41dc133b9db7814ac7118c40cfcb97183e646e956c7a9834bb6a530c3a331cddcd7c7118267d02e809a797463820875e6153652f136fbb32a63c90fbefb636959d49ab5a85f0432697a9d79b66aa9a60df8e46000a8d1ce29c83a4e280d95f783bb2d1fbc3d887a51b8596425da2666db7e978870333298ddc250a6440bf8facb94e5d13300d72e5c34890221a5ef671b903c916f8a98d2e3a11e78f290bb824b1efd4af272b066e79a8b932c0ddbbed7053c9843ae47003bd66c214c0aaaaa3bd406856ce56cea0052db758"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x10#\'\x00', 0x1) write(r2, &(0x7f0000000600), 0x0) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) rseq(&(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000009, 0x5, 0x9}, 0x1}, 0xffffffffffffff70, 0x1, 0x0) 04:19:53 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 04:19:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:53 executing program 0: io_submit(0x0, 0x0, &(0x7f0000000540)) 04:19:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:53 executing program 0: io_submit(0x0, 0x0, &(0x7f0000000540)) 04:19:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:53 executing program 0: io_submit(0x0, 0x0, &(0x7f0000000540)) 04:19:53 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 04:19:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:56 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 04:19:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:56 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x488d00, 0x0) r0 = openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x74400, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x0, 0x0, &(0x7f0000000300)="58d7d7b0c3f4cea15552a1752ce070760bb5b890dd535c12069bf3ac399ef356f1c49217bed8c0f4bebe0fde75358d8360e01132c940c3354853904050b28013f8903e136eb7ef9b464f8b13893c3ef33c41e058bfef0f56b7263a15426a9a99f5277a4e14bf7181e6290533c51d81b9fe7a4ad306d9683f114fa9f7edcb884e03c5ec5e95bbfd65f8e7e9e5ffb00edea13bc69d04f111c8dd1d7427f13a93bb331b5af484523f7aa03c00d057b76ddd1b9166dd6d3a6013f3217bbfe5beac5cc2840dcf07830368fc7bfa6cad4419ac0e6671dc0ff7dc8294eb39cf4d7865627985200abded49c21b6da9231da4a970f017d45f958a9866d9cb1147f8845e325065239fab8ab06a21fb9be65d121fca0dd59e3450d1965b55a30cb50747aa6b87274471cff6d4e6cf1c8d092a65ea63909fae32b99717010b5dff8a5ebaa898f316aaffdb8cc00185ddc1caf6ebc1402a9508be82648c91eca9231efb9d33b070000b67021de6641f0afdfa4cfbef669ba7e5c10ffba71aec68eba770cbe616545f61e7b4ccdd1dce579fb04825b1269217e70adc8a419bc8d69bd7a1bedd11ae15dc2e55a1358657ccfbb7e55a8cff7cc6a0884841d81659cbe8a32124620188659c9b4376d2f417c3aae81333a6fdb3699d43cf2800d20d1a469f97cb5ea0b5f4df4927428dfbe4bff3b31ed07d856f0560e96aba73e124106a5552ba711914a651e8c897c2c9ab9de4551b210af37d2966483d8c811c5c2dab438658527efd96ec4a0091a7b17eb2fc4fab2ac749ab8c5a511bab7affd0741717c0e31c235ebc4842e40a3e5b6cbbf0854865f5d3fce7b2d6a3fa0e18d3d4d4941dc5ed1a180145cbb35005e1e38e1e50fe6c133e662891e8ba5f30ed0013b737984051e12a2dbea49ad0f065d8fc4661ddfe4e47f766912b28770125715e97f063c939aab7d02a55c2cb2687ea53e92514dfb21a528f6e9b1d64f7edac92e13e2280f48226f615b548b9c3be3f5efeaec1a2dd617bd338a375abb5e344c0ba97b49c82a9c3a0c732ffcd8ef8baf6ff464fa6aa00db7c91e43a390b6b1958e6e5edb18cb0a1caf9e53ba934131e24e1c10cbf978caa7b83be2229abb6ea275dc913c87dcd788bf96dcb40f57e98579a58889f0461e56f72fb41dc133b9db7814ac7118c40cfcb97183e646e956c7a9834bb6a530c3a331cddcd7c7118267d02e809a797463820875e6153652f136fbb32a63c90fbefb636959d49ab5a85f0432697a9d79b66aa9a60df8e46000a8d1ce29c83a4e280d95f783bb2d1fbc3d887a51b8596425da2666db7e978870333298ddc250a6440bf8facb94e5d13300d72e5c34890221a5ef671b903c916f8a98d2e3a11e78f290bb824b1efd4af272b066e79a8b932c0ddbbed7053c9843ae47003bd66c214c0aaaaa3bd406856ce56cea0052db758"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x10#\'\x00', 0x1) write(r2, &(0x7f0000000600), 0x0) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) rseq(&(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000009, 0x5, 0x9}, 0x1}, 0xffffffffffffff70, 0x1, 0x0) 04:19:56 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 04:19:56 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) 04:19:56 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 04:19:56 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 04:19:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:56 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 04:19:56 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x18, {0x2, 0x4e22, @broadcast}, 'xfrm0\x00'}) 04:19:57 executing program 5: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xceff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40100, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mmap(&(0x7f0000372000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x6df7e000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) tkill(0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) getpid() getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x7}, 0x1, 0x0, 0x0, 0x4040900}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 04:19:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) clock_adjtime(0x0, 0x0) 04:19:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$cont(0x9, r0, 0x0, 0x0) 04:19:59 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x18, {0x2, 0x4e22, @broadcast}, 'xfrm0\x00'}) 04:19:59 executing program 5: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xceff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40100, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mmap(&(0x7f0000372000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x6df7e000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) tkill(0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) getpid() getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x7}, 0x1, 0x0, 0x0, 0x4040900}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) [ 368.385998][ T27] audit: type=1326 audit(1592453999.429:38): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14492 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:19:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:19:59 executing program 5: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xceff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40100, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mmap(&(0x7f0000372000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x6df7e000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) tkill(0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) getpid() getdents(0xffffffffffffffff, &(0x7f0000000540)=""/144, 0x169) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x7}, 0x1, 0x0, 0x0, 0x4040900}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 04:19:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:19:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:00 executing program 5: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x18, {0x2, 0x4e22, @broadcast}, 'xfrm0\x00'}) 04:20:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="11080000000000fe88000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fc0100"/72], 0x48) write(r2, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 369.185004][ T27] audit: type=1326 audit(1592454000.229:39): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14492 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:20:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/163, 0xa3}, {0x0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/77, 0x4d}, {0x0}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x8, &(0x7f0000000c40)=""/202, 0xca}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb98", @ANYBLOB="0008000000000c90fcdbdf251100e10967f0"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/46, &(0x7f0000000500)=0x2e) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2023c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000003c0)='./file0\x00', 0xc007e, 0x23) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) 04:20:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xfffffff6}]}) inotify_init() [ 369.909920][ T27] audit: type=1326 audit(1592454000.949:40): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14558 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:20:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 370.702791][ T27] audit: type=1326 audit(1592454001.749:41): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14558 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f89a code=0xffff0000 04:20:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:02 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) 04:20:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/163, 0xa3}, {0x0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/77, 0x4d}, {0x0}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x8, &(0x7f0000000c40)=""/202, 0xca}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb98", @ANYBLOB="0008000000000c90fcdbdf251100e10967f0"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/46, &(0x7f0000000500)=0x2e) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2023c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000003c0)='./file0\x00', 0xc007e, 0x23) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) 04:20:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/163, 0xa3}, {0x0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/77, 0x4d}, {0x0}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x8, &(0x7f0000000c40)=""/202, 0xca}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb98", @ANYBLOB="0008000000000c90fcdbdf251100e10967f0"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/46, &(0x7f0000000500)=0x2e) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2023c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000003c0)='./file0\x00', 0xc007e, 0x23) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) 04:20:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x21c, 0x0, 0x118, 0x3e020000, 0x0, 0x118, 0x188, 0x1d0, 0x1d0, 0x188, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0xb0, 0xd0, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x278) 04:20:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="00008863"], 0x4) 04:20:03 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x280183, 0x0) openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x74400, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast1}}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x0, 0x0, &(0x7f0000000300)="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"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x10#\'\x00', 0x3) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 04:20:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r2, r1, 0x0) 04:20:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="00008863"], 0x4) 04:20:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r2, r1, 0x0) 04:20:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x280183, 0x0) openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x74400, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast1}}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x0, 0x0, &(0x7f0000000300)="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"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x10#\'\x00', 0x3) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 04:20:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x280183, 0x0) openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x74400, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000740)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast1}}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x0, 0x0, &(0x7f0000000300)="58d7d7b0c3f4cea15552a1752ce070760bb5b890dd535c12069bf3ac399ef356f1c49217bed8c0f4bebe0fde75358d8360e01132c940c3354853904050b28013f8903e136eb7ef9b464f8b13893c3ef33c41e058bfef0f56b7263a15426a9a99f5277a4e14bf7181e6290533c51d81b9fe7a4ad306d9683f114fa9f7edcb884e03c5ec5e95bbfd65f8e7e9e5ffb00edea13bc69d04f111c8dd1d7427f13a93bb331b5af484523f7aa03c00d057b76ddd1b9166dd6d3a6013f3217bbfe5beac5cc2840dcf07830368fc7bfa6cad4419ac0e6671dc0ff7dc8294eb39cf4d7865627985200abded49c21b6da9231da4a970f017d45f958a9866d9cb1147f8845e325065239fab8ab06a21fb9be65d121fca0dd59e3450d1965b55a30cb50747aa6b87274471cff6d4e6cf1c8d092a65ea63909fae32b99717010b5dff8a5ebaa898f316aaffdb8cc00185ddc1caf6ebc1402a9508be82648c91eca9231efb9d33b070000b67021de6641f0afdfa4cfbef669ba7e5c10ffba71aec68eba770cbe616545f61e7b4ccdd1dce579fb04825b1269217e70adc8a419bc8d69bd7a1bedd11ae15dc2e55a1358657ccfbb7e55a8cff7cc6a0884841d81659cbe8a32124620188659c9b4376d2f417c3aae81333a6fdb3699d43cf2800d20d1a469f97cb5ea0b5f4df4927428dfbe4bff3b31ed07d856f0560e96aba73e124106a5552ba711914a651e8c897c2c9ab9de4551b210af37d2966483d8c811c5c2dab438658527efd96ec4a0091a7b17eb2fc4fab2ac749ab8c5a511bab7affd0741717c0e31c235ebc4842e40a3e5b6cbbf0854865f5d3fce7b2d6a3fa0e18d3d4d4941dc5ed1a180145cbb35005e1e38e1e50fe6c133e662891e8ba5f30ed0013b737984051e12a2dbea49ad0f065d8fc4661ddfe4e47f766912b28770125715e97f063c939aab7d02a55c2cb2687ea53e92514dfb21a528f6e9b1d64f7edac92e13e2280f48226f615b548b9c3be3f5efeaec1a2dd617bd338a375abb5e344c0ba97b49c82a9c3a0c732ffcd8ef8baf6ff464fa6aa00db7c91e43a390b6b1958e6e5edb18cb0a1caf9e53ba934131e24e1c10cbf978caa7b83be2229abb6ea275dc913c87dcd788bf96dcb40f57e98579a58889f0461e56f72fb41dc133b9db7814ac7118c40cfcb97183e646e956c7a9834bb6a530c3a331cddcd7c7118267d02e809a797463820875e6153652f136fbb32a63c90fbefb636959d49ab5a85f0432697a9d79b66aa9a60df8e46000a8d1ce29c83a4e280d95f783bb2d1fbc3d887a51b8596425da2666db7e978870333298ddc250a6440bf8facb94e5d13300d72e5c34890221a5ef671b903c916f8a98d2e3a11e78f290bb824b1efd4af272b066e79a8b932c0ddbbed7053c9843ae47003bd66c214c0aaaaa3bd406856ce56cea0052db758"}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x10#\'\x00', 0x3) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 04:20:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xba, 0x0, 0x9}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r2, r1, 0x0) 04:20:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="00008863"], 0x4) 04:20:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="00008863"], 0x4) 04:20:06 executing program 0: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) 04:20:08 executing program 0: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/112, 0x70) lseek(r0, 0xfffffffffffffffe, 0x1) 04:20:08 executing program 5: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000000)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x4, 0x2}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x0, 0x0, "0000001000"}) syz_open_pts(r1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x80}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000075, 0x0) socket(0x0, 0x0, 0x0) 04:20:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="00008864"], 0x11) 04:20:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/132, 0x84) 04:20:09 executing program 5: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000000)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x4, 0x2}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x0, 0x0, "0000001000"}) syz_open_pts(r1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x80}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000075, 0x0) socket(0x0, 0x0, 0x0) 04:20:09 executing program 3: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000000)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x4, 0x2}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x0, 0x0, "0000001000"}) syz_open_pts(r1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x80}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000075, 0x0) socket(0x0, 0x0, 0x0) 04:20:09 executing program 0: open(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 04:20:09 executing program 3: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) socket(0x0, 0x0, 0x0) 04:20:09 executing program 5: 04:20:09 executing program 5: 04:20:09 executing program 0: open(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 04:20:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:11 executing program 5: 04:20:12 executing program 3: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) socket(0x0, 0x0, 0x0) 04:20:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:12 executing program 0: 04:20:12 executing program 5: 04:20:12 executing program 0: 04:20:12 executing program 5: 04:20:12 executing program 0: 04:20:12 executing program 5: 04:20:12 executing program 3: 04:20:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:14 executing program 5: 04:20:14 executing program 0: 04:20:14 executing program 3: 04:20:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:14 executing program 5: 04:20:14 executing program 0: 04:20:14 executing program 3: 04:20:15 executing program 0: 04:20:15 executing program 5: 04:20:15 executing program 3: 04:20:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:17 executing program 3: 04:20:17 executing program 0: 04:20:17 executing program 5: 04:20:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:17 executing program 3: 04:20:18 executing program 5: 04:20:18 executing program 0: 04:20:18 executing program 3: 04:20:18 executing program 5: 04:20:18 executing program 3: 04:20:20 executing program 3: 04:20:20 executing program 0: 04:20:20 executing program 5: 04:20:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:21 executing program 5: 04:20:21 executing program 0: 04:20:21 executing program 3: 04:20:21 executing program 5: 04:20:21 executing program 0: 04:20:21 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/59, 0x3b}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(0x0, 0x0) getpid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 04:20:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x68, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953516d9ed46fba6a46b38a8a348b12987150aa1c3f5efce2f212"}, &(0x7f00000000c0)=0x70) syz_genetlink_get_family_id$tipc(0x0) socket$alg(0x26, 0x5, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/1, 0x1}}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) [ 390.347976][T14947] new mount options do not match the existing superblock, will be ignored [ 390.354709][T10179] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 390.375679][T10179] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 390.454797][ T9782] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.466955][ T9782] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 390.478001][T14945] overlayfs: conflicting lowerdir path [ 390.483544][T14947] new mount options do not match the existing superblock, will be ignored 04:20:21 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/59, 0x3b}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(0x0, 0x0) getpid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 390.541420][T14950] overlayfs: conflicting lowerdir path [ 390.689953][T14970] new mount options do not match the existing superblock, will be ignored 04:20:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/59, 0x3b}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(0x0, 0x0) getpid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 04:20:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x68, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953516d9ed46fba6a46b38a8a348b12987150aa1c3f5efce2f212"}, &(0x7f00000000c0)=0x70) syz_genetlink_get_family_id$tipc(0x0) socket$alg(0x26, 0x5, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:24 executing program 5: 04:20:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 393.146675][T15010] new mount options do not match the existing superblock, will be ignored 04:20:24 executing program 5: 04:20:24 executing program 5: [ 393.307494][T15005] overlayfs: conflicting lowerdir path 04:20:24 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) dup(0xffffffffffffffff) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, 0x0) userfaultfd(0x0) dup(0xffffffffffffffff) 04:20:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000140)) 04:20:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffb}], 0x1) tkill(r1, 0x1) [ 393.454227][T15022] ubi0: attaching mtd0 [ 393.458929][T15022] ubi0: scanning is finished [ 393.465024][T15022] ubi0: empty MTD device detected 04:20:24 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0xfd, 0x0, 0x0, 0x0, 0xa, 0xb2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2d00, 0x2, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=""/56, 0x0, 0x38, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1561}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000280)={0x18, 0x0, 0xfffffffffffffffe, {0xc6}}, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="e14e2129cbc0ff03c3ae4ef335ccc2493904f6759f3db4107556dd1ee3a0cbc3657756db93478414e9b88ac4c451a6100396d59814c3cfd58a6f9200000000fcaed6583605ccba24313fe9d69e776d902a186aa587900e5cec8acea7252ab983e61bb2b87f545bc7eb52531d69be2bf8faebd1f33138e547b5aae7bd512c614900000000000000000000003f83455eab32691901000b91c5048a7b2285c347eec46a9ac20200b21dbf0c3d09a7c727d0bedd1f6f412a651338f70b5417c00d75dd5edb11e6567747bf22dd915411c9c91e0047ca21b563eb771203f1c4797826c7c228b423af1e5ff96c77b66eaee246df1d5df6eed6cff66fb8147e037e349bdbd55fb18ff15671e9c9cff796ff81f53f348242da2025d3987a43bb22a9683702ce5037e3ffe7e8c8d0238d70bf000000000000000000000000005c53435bdd368456a1eae11e87462930a189c64804d32bb0f073a393e28697161ea2d0a301378a9936a35a08c8ded22668958713f189b83fb3081773dcee0260edb14f550c58025b771d9f9ff68a046cb6da08f80e5b95fe4b409e033aeaef9c48f00a0833ec2e5b318ac62464b940c89fe21d742e7a45a740d46fb0e36855b5309821552e725f08688ce154fb7fa5135da60d81dc7926feb6c6b4375b9d4cbed80a7be3e8cc963d3b8f35e3df5713f4eee60164d6e25f310c8a4e70d25e35bce16d66905d8ae92293a65f58a786b2db6bd3173b98fb3653b38d3c14d4eb863c406eb1b9f1ef34261bb1333f560cc95cbf63adc533f9f2c9a0056136e27ccafac8235875fd7385d4730a7549c00102a6cf6b0eb481bf66e5291702e8442f", @ANYRES16, @ANYRES16=r0], 0x4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000002040)={{0x0, 0x0, 0x80}}) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x800, 0x0) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') rmdir(&(0x7f0000000400)='./file0\x00') [ 393.505863][T15022] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 393.515129][T15022] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 393.534168][T15022] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 393.550145][T15022] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 393.568003][T15022] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 393.583734][T15022] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 393.601950][T15022] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3509093878 [ 393.635420][T15022] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 393.675558][T15031] ubi0: background thread "ubi_bgt0d" started, PID 15031 04:20:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20001, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:20:27 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) dup(0xffffffffffffffff) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, 0x0) userfaultfd(0x0) dup(0xffffffffffffffff) 04:20:27 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:27 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0xfd, 0x0, 0x0, 0x0, 0xa, 0xb2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2d00, 0x2, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=""/56, 0x0, 0x38, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1561}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000280)={0x18, 0x0, 0xfffffffffffffffe, {0xc6}}, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES16, @ANYRES16=r0], 0x4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000002040)={{0x0, 0x0, 0x80}}) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x800, 0x0) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') rmdir(&(0x7f0000000400)='./file0\x00') 04:20:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 396.164392][T15055] ubi: mtd0 is already attached to ubi0 04:20:27 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) dup(0xffffffffffffffff) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, 0x0) userfaultfd(0x0) dup(0xffffffffffffffff) 04:20:27 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) dup(0xffffffffffffffff) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, 0x0) userfaultfd(0x0) dup(0xffffffffffffffff) [ 396.324374][T15072] ubi: mtd0 is already attached to ubi0 04:20:27 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0xfd, 0x0, 0x0, 0x0, 0xa, 0xb2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2d00, 0x2, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=""/56, 0x0, 0x38, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1561}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000280)={0x18, 0x0, 0xfffffffffffffffe, {0xc6}}, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES16, @ANYRES16=r0], 0x4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000002040)={{0x0, 0x0, 0x80}}) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x800, 0x0) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') rmdir(&(0x7f0000000400)='./file0\x00') [ 396.400013][T15075] ubi: mtd0 is already attached to ubi0 04:20:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 04:20:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) 04:20:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20001, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:20:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, 0x0) [ 396.752245][T15093] new mount options do not match the existing superblock, will be ignored 04:20:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 396.887021][T15093] new mount options do not match the existing superblock, will be ignored 04:20:28 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x69, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953516d9ed46fba6a46b38a8a348b12987150aa1c3f5efce2f21272"}, &(0x7f00000000c0)=0x71) syz_genetlink_get_family_id$tipc(0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x4040) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x800) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 397.258238][T15115] overlayfs: conflicting lowerdir path [ 397.330754][T15117] overlayfs: conflicting lowerdir path 04:20:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip6_tables_names\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/253, 0xfd}], 0x1, 0x100000000000008) 04:20:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x69, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953516d9ed46fba6a46b38a8a348b12987150aa1c3f5efce2f21272"}, &(0x7f00000000c0)=0x71) syz_genetlink_get_family_id$tipc(0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x4040) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x800) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 399.278781][T15148] overlayfs: conflicting lowerdir path 04:20:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:30 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/unix\x00') preadv(r0, &(0x7f0000003240)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x4) 04:20:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x14, r5, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r8 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x42, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40910) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 04:20:30 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x40, &(0x7f0000000140)={@rand_addr, @dev, @empty}, 0xc) 04:20:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:20:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x14, r5, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r8 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x42, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40910) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 04:20:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x14, r5, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r8 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x42, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40910) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 04:20:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4400c410}, 0x0) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) 04:20:33 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:33 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000000100)) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240082, 0x0) 04:20:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x46, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494"}, &(0x7f00000000c0)=0x4e) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:33 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000000100)) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240082, 0x0) 04:20:33 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000000100)) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240082, 0x0) 04:20:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:33 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000000100)) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240082, 0x0) 04:20:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') 04:20:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 402.884282][T15252] overlayfs: conflicting lowerdir path [ 402.948524][T15258] overlayfs: conflicting lowerdir path 04:20:34 executing program 5: clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) openat$nvram(0xffffff9c, 0x0, 0x400, 0x0) 04:20:34 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:34 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x2, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) [ 403.170827][T15279] nvme_fabrics: missing parameter 'transport=%s' [ 403.178636][T15279] nvme_fabrics: missing parameter 'nqn=%s' 04:20:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x14, r5, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB="00012b00000000000000050000003800058008000100657468001c000280080003000000008008000400000000000800030093000000070001006962000007000100696200000c000280080001000000000014000980080002000100010008000100020000005400038008000200dd7c00000800020001000100080002000700000008000300090000000800010005000000080001000300000008000100090000000800010000000080080002000900000008000300030000002400068008000100060000000400020008000100ff070000040002000800010007000000880004800900010073797a31000000001300010062726f6164636173742d6c696e6b00001400078008000400ff0100000800020040000000140007800800030005000000080001000f0000003c000780080002000efc00000800010007000000080001001500000008000400090000000800020005000000080002009b0f00000800040003000000d689da39dc59d351c665ae1c8f6c1f905788f4a6725679a6c08d0d947316b3cdb36fe9cbef1b1de0b43a6374175a1ebed0a85bbb1060b833d25c174528a9f10f5c4419e58de8ac153f9191a896a2fa7f3e96a4896cd7b58f6fc8dbacaf779771d580510e2ac6086fd4db84bc346cbde7f3d6cc0b7a7feb8a2b8f40accdf802b6c939690f41a70c76fc768068cbd4a4e92e1f334bd051b23db714b36b708bd75f5664b6fc88849e4f7172dcbec9"], 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r8 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x40910) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 04:20:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x400}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000003880)=[{{&(0x7f0000000200)=@ipx, 0x80, 0x0}}, {{&(0x7f0000001a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002fc0)=[{0x0}, {0x0}, {&(0x7f0000001c80)=""/193, 0xc1}, {&(0x7f0000001d80)=""/219, 0xdb}, {&(0x7f0000001e80)=""/25, 0x19}, {0x0}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/66, 0x42}], 0x8, &(0x7f0000003040)=""/220, 0xdc}}, {{&(0x7f0000003140)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000003380)=""/111, 0x6f}, 0xfffff001}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003480)=""/83, 0x53}, {&(0x7f0000003500)=""/190, 0xbe}, {&(0x7f00000035c0)=""/187, 0xbb}], 0x3, &(0x7f00000036c0)=""/145, 0x91}, 0x96}], 0x4, 0x22, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080eff7fffe) 04:20:36 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:36 executing program 5: clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) openat$nvram(0xffffff9c, 0x0, 0x400, 0x0) [ 405.882802][ T27] audit: type=1804 audit(1592454036.929:42): pid=15318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir234228757/syzkaller.2yA1oQ/197/bus" dev="sda1" ino=16362 res=1 04:20:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x4b4c, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x14, r5, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r8 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x40910) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 04:20:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0xffa}, 0x0, 0x0) 04:20:37 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x400}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000003880)=[{{&(0x7f0000000200)=@ipx, 0x80, 0x0}}, {{&(0x7f0000001a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002fc0)=[{0x0}, {0x0}, {&(0x7f0000001c80)=""/193, 0xc1}, {&(0x7f0000001d80)=""/219, 0xdb}, {&(0x7f0000001e80)=""/25, 0x19}, {0x0}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/66, 0x42}], 0x8, &(0x7f0000003040)=""/220, 0xdc}}, {{&(0x7f0000003140)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000003380)=""/111, 0x6f}, 0xfffff001}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003480)=""/83, 0x53}, {&(0x7f0000003500)=""/190, 0xbe}, {&(0x7f00000035c0)=""/187, 0xbb}], 0x3, &(0x7f00000036c0)=""/145, 0x91}, 0x96}], 0x4, 0x22, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080eff7fffe) [ 407.029401][ T27] audit: type=1804 audit(1592454038.069:43): pid=15366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir234228757/syzkaller.2yA1oQ/198/bus" dev="sda1" ino=16383 res=1 04:20:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x400}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000003880)=[{{&(0x7f0000000200)=@ipx, 0x80, 0x0}}, {{&(0x7f0000001a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002fc0)=[{0x0}, {0x0}, {&(0x7f0000001c80)=""/193, 0xc1}, {&(0x7f0000001d80)=""/219, 0xdb}, {&(0x7f0000001e80)=""/25, 0x19}, {0x0}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/66, 0x42}], 0x8, &(0x7f0000003040)=""/220, 0xdc}}, {{&(0x7f0000003140)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000003380)=""/111, 0x6f}, 0xfffff001}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003480)=""/83, 0x53}, {&(0x7f0000003500)=""/190, 0xbe}, {&(0x7f00000035c0)=""/187, 0xbb}], 0x3, &(0x7f00000036c0)=""/145, 0x91}, 0x96}], 0x4, 0x22, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080eff7fffe) 04:20:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000140)) [ 407.501227][ T27] audit: type=1804 audit(1592454038.549:44): pid=15375 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir086616486/syzkaller.9Y1erU/266/bus" dev="sda1" ino=16381 res=1 04:20:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:39 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000040)) 04:20:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/59, 0x3b}], 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) tkill(0x0, 0x3c) getpid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0x101, 0x8000000002}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) 04:20:39 executing program 0: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') [ 408.912858][T15395] overlayfs: conflicting lowerdir path [ 408.998787][T15400] new mount options do not match the existing superblock, will be ignored [ 409.010034][T15402] overlayfs: conflicting lowerdir path [ 409.056650][T15410] new mount options do not match the existing superblock, will be ignored 04:20:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c010000100013070000000000000000ac141400000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000002000400000000000000000070001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000002001000080000000e5de"], 0x16c}}, 0x0) 04:20:40 executing program 5: r0 = epoll_create(0x2000000000000006) r1 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 04:20:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={r0, 0x69, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953516d9ed46fba6a46b38a8a348b12987150aa1c3f5efce2f21272"}, &(0x7f00000000c0)=0x71) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x4f, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953"}, &(0x7f00000000c0)=0x57) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 409.272785][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:20:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0) [ 409.403742][T15420] overlayfs: conflicting lowerdir path 04:20:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) lchown(0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) [ 409.451801][T15424] overlayfs: conflicting lowerdir path [ 409.473043][T15428] overlayfs: conflicting lowerdir path [ 409.579651][T15437] overlayfs: conflicting lowerdir path [ 409.594952][T15440] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:20:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={r0, 0x69, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953516d9ed46fba6a46b38a8a348b12987150aa1c3f5efce2f21272"}, &(0x7f00000000c0)=0x71) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x4f, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953"}, &(0x7f00000000c0)=0x57) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:42 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) lchown(0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) [ 412.011066][T15461] overlayfs: conflicting lowerdir path [ 412.013535][T15458] overlayfs: conflicting lowerdir path 04:20:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x4f, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953"}, &(0x7f00000000c0)=0x57) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:43 executing program 5: dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4094, 0xffe}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0xffa}, 0x0, 0x0) 04:20:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 412.376457][T15482] overlayfs: conflicting lowerdir path 04:20:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}}, 0x78) tkill(0x0, 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x3) 04:20:43 executing program 3: r0 = userfaultfd(0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x140c2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) [ 414.840466][ T0] NOHZ: local_softirq_pending 08 04:20:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}}, 0x78) tkill(0x0, 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x3) 04:20:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff}, 0x6) 04:20:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) lchown(0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:46 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc5f22fe58179d6aa, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 04:20:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}}, 0x78) tkill(0x0, 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x3) [ 415.042529][T15533] ubi0: detaching mtd0 [ 415.069973][T15533] ubi0: mtd0 is detached 04:20:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4094, 0xffe}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0xffa}, 0x0, 0x0) 04:20:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:46 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc5f22fe58179d6aa, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 04:20:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:46 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc5f22fe58179d6aa, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 04:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc5f22fe58179d6aa, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 04:20:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) lchown(0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES64], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 04:20:49 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @loopback, @rand_addr, 0x1}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@random="de0791e713c2"}, {@mac=@multicast}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 'gre0\x00', 'macvlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @remote, @broadcast}}}, {{@arp={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:20:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x80, "e5ded35713882b9ed9bc5c9579c0e82f7c9b133cc773ecd13afa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0) 04:20:49 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 418.182772][T15601] ptrace attach of "/root/syz-executor.1"[15600] was attempted by "/root/syz-executor.1"[15601] [ 418.237125][T15604] x_tables: duplicate underflow at hook 1 04:20:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') exit(0x0) setfsgid(0xee01) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000240)=0x80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000300)={0x8}) 04:20:49 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 418.336699][T15613] ptrace attach of "/root/syz-executor.1"[15612] was attempted by "/root/syz-executor.1"[15613] 04:20:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 418.432615][T15629] ptrace attach of "/root/syz-executor.1"[15628] was attempted by "/root/syz-executor.1"[15629] 04:20:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x80, "e5ded35713882b9ed9bc5c9579c0e82f7c9b133cc773ecd13afa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0) 04:20:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:52 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000011c0)={0x0, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)}) 04:20:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc5f22fe58179d6aa, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) clock_gettime(0x0, &(0x7f0000000100)) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) dup(0xffffffffffffffff) 04:20:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4087, 0xff7}], 0x1, 0x8) 04:20:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000001c0)=""/171, &(0x7f0000000280)=0xab) 04:20:52 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x125, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0) 04:20:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:52 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x125, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0) 04:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_init_net_socket$ax25(0x3, 0x0, 0xcd) openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240082, 0x0) 04:20:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:55 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x125, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0) 04:20:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 04:20:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000004c0)="fe", 0x1}]) 04:20:55 executing program 5: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x80000000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2}) 04:20:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a8", 0x1c}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc33760036b9405cb4aed12f0000001500ae47a825d8680027805acf4f8f3646475c181897b367716fcacdb72584763b9ac2f814ff492b41", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 04:20:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7fff}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/59, 0x3b}], 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) tkill(0x0, 0x3c) getpid() ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0x101, 0x8000000002}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x8) 04:20:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:56 executing program 5: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 425.094297][T15790] overlayfs: conflicting lowerdir path 04:20:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) [ 425.137484][T15798] new mount options do not match the existing superblock, will be ignored 04:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) [ 425.198356][T15799] overlayfs: conflicting lowerdir path 04:20:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000002400070500deffffffffffffff000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000700010066710000340002"], 0x60}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 04:20:56 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x7000000, 0x0, 0x258, 0xc403, 0x3b8, 0x210, 0x210, 0x3b8, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'veth0_macvtap\x00', {0x0, 0x1774, 0x0, 0x0, 0x0, 0x2, 0x401}}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 04:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) [ 425.420275][T15818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.427110][T15817] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.452999][T15817] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 04:20:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@dstopts={{0x18}}], 0x18}, 0x0) 04:20:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:20:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:20:58 executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 04:20:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x4f, "2b9a54a091a76d4fd0e1cc1f727de2c4dd846a3e366d174170b3e66f2699a62f111c829437ee0b6694953b16e0538ea939127d1d16671a81f892c412d59b4d97779d1b425494afa11034d11a1ad953"}, &(0x7f00000000c0)=0x57) syz_genetlink_get_family_id$tipc(0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040001}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x800) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') [ 427.670430][T15841] overlayfs: conflicting lowerdir path [ 427.728197][T15841] overlayfs: conflicting lowerdir path [ 427.851774][T15855] overlayfs: conflicting lowerdir path 04:20:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 04:20:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 04:20:59 executing program 5: 04:20:59 executing program 5: 04:20:59 executing program 5: 04:20:59 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RREADLINK(r1, 0x0, 0x10) close(r1) timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 04:20:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:20:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:21:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 04:21:01 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = timerfd_create(0x0, 0x0) dup2(r1, r2) accept$unix(r2, 0x0, 0x0) 04:21:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000200)="4020ed2b259925f8029b533eb3a3a302ff7bba1d6d7012bfbb86bacd240d68a2441c1ed4089b65e8f9c22ac48f0afa39127c8a2ed704e431c1dc1f820532c9923a50953e481baaef62e4fb497c6a8443b20f5b69274286e88215269f44657c97190d2b129ed388ef", 0x68, 0x198000000}, {&(0x7f00000002c0)="1ad355ae19495754b7699f6fe1b00d1513230cf8a64f1f44ee610e6cce172c6c3e14807f28f008fed222b71c9857d6778b6a7c8e7469b92f910b2307f08e9e8ddb8e891f80fb1093c8c4f130f615e2ac2cb2d2b904d4455b569ad82d1f4b3680882ee446df40cc47e06aa834d52bc58ef7c3e2eae45a19bd9508b50d6f084ff62113d96e88125e40a63774ff807834b269", 0x91, 0x6639956a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 04:21:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r2, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 04:21:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) [ 453.881135][ T0] NOHZ: local_softirq_pending 08 [ 514.679267][ T0] NOHZ: local_softirq_pending 08 [ 535.154938][ T0] NOHZ: local_softirq_pending 08 [ 606.827800][ T0] NOHZ: local_softirq_pending 08 [ 618.345765][ T0] NOHZ: local_softirq_pending 08 [ 668.261886][ T0] NOHZ: local_softirq_pending 08